Skip to content
OpenAdvisories

Vendor

Coding-Solo

1 known vulnerabilities.

Products

godot-mcp 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.8
    CVE-2026-25546 Public exploit

    Godot MCP is vulnerable to Command Injection via unsanitized projectPath

    Godot MCP is a Model Context Protocol (MCP) server for interacting with the Godot game engine. Prior to version 0.1.1, a command injection vulnerability in godot-mcp allows remote code execution. The executeOperation function passed user-controlled input (e.g…

    Coding-Solo godot-mcp @coding-solo/godot-mcp npm