Description
radare2-mcp version 1.6.0 and earlier contains an os command injection vulnerability that allows remote attackers to execute arbitrary commands by bypassing the command filter through shell metacharacters in user-controlled input passed to r2_cmd_str(). Attackers can inject shell metacharacters through the jsonrpc interface parameters to achieve remote code execution on the host running radare2-mcp without requiring authentication.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| radareorg | radare2-mcp | ≤ 1.6.0 | — |
References
- Pull Request issue-tracking
- Patch Commit patch
- https://www.vulncheck.com/advisories/radare2-mcp-os-command-injection-via-shell-metacharacter-bypass third-party-advisory