What is the CVSS score of CVE-2026-25546?

CVE-2026-25546 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Godot Mcp are affected by CVE-2026-25546?

A critical remote code execution vulnerability exists in Godot MCP (CVE-2026-25546) that allows attackers to execute arbitrary commands on systems running affected versions.. A patch is available.

How to fix or mitigate CVE-2026-25546?

Within 24 hours: Inventory all systems running Godot MCP and isolate affected instances from production networks; disable the executeOperation function if possible. Within 7 days: Implement network-level access controls restricting MCP server connectivity to trusted hosts only; deploy input validation and sanitization rules. Within 30 days: Establish a vendor communication plan to track patch availability; evaluate alternative tools or upgrade to patched versions immediately upon release.

Godot Mcp CVE-2026-25546

HIGH

OS Command Injection (CWE-78)

2026-02-04 security-advisories@github.com

GHSA-8jx2-rhfh-q928

RCE Command Injection Godot Mcp

7.8

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

7.8 HIGH

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

CVE Published

Feb 04, 2026 - 22:16 nvd

HIGH 7.8

DescriptionGitHub Advisory

Godot MCP is a Model Context Protocol (MCP) server for interacting with the Godot game engine. Prior to version 0.1.1, a command injection vulnerability in godot-mcp allows remote code execution. The executeOperation function passed user-controlled input (e.g., projectPath) directly to exec(), which spawns a shell. An attacker could inject shell metacharacters like $(command) or &calc to execute arbitrary commands with the privileges of the MCP server process. This affects any tool that accepts projectPath, including create_scene, add_node, load_sprite, and others. This issue has been patched in version 0.1.1.

AnalysisAI

Remote code execution in Godot MCP prior to version 0.1.1 results from unsafe shell command execution when processing user-supplied project paths. An unauthenticated attacker can inject shell metacharacters through multiple tools (create_scene, add_node, load_sprite, etc.) to execute arbitrary commands with the privileges of the MCP server process. No patch is currently available for affected deployments.

Technical ContextAI

This vulnerability (CWE-78: OS Command Injection) affects server for interacting with the Godot game engine.. Godot MCP is a Model Context Protocol (MCP) server for interacting with the Godot game engine. Prior to version 0.1.1, a command injection vulnerability in godot-mcp allows remote code execution. The executeOperation function passed user-controlled input (e.g., projectPath) directly to exec(), which spawns a shell. An attacker could inject shell metacharacters like $(command) or &calc to execute arbitrary commands with the privileges of the MCP server process. This affects any tool that accepts