ssh-mcp CVE-2026-7038

Q: What is the CVSS score of CVE-2026-7038?

CVE-2026-7038 has a CVSS 4.0 base score of 1.9 (Low). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-25715 LOW

Insufficiently Protected Credentials (CWE-522)

2026-04-26 cna@vuldb.com

Information Disclosure

1.9

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

1.9 LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Apr 26, 2026 - 12:30 vuln.today

EUVD ID Assigned

Apr 26, 2026 - 12:22 euvd

EUVD-2026-25715

Analysis Generated

Apr 26, 2026 - 12:22 vuln.today

CVE Published

Apr 26, 2026 - 12:16 nvd

LOW 1.9

DescriptionCVE.org

A weakness has been identified in tufantunc ssh-mcp up to 1.5.0. Impacted is an unknown function of the file src/index.ts of the component Command Line Handler. This manipulation causes insufficiently protected credentials. The attack is restricted to local execution. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

AnalysisAI

Insufficient credential protection in tufantunc ssh-mcp up to version 1.5.0 allows local authenticated users to disclose sensitive credentials through the Command Line Handler component. The vulnerability affects src/index.ts and has a publicly available exploit, though the low CVSS score of 1.9 reflects limited scope (confidentiality impact only, no integrity or availability effects) and requirement for local authenticated access.

Technical ContextAI

ssh-mcp is a command-line tool or library for SSH-based Model Context Protocol (MCP) operations. The vulnerability exists in src/index.ts, the component responsible for parsing and handling command-line arguments. The root cause is classified as CWE-522 (Insufficiently Protected Credentials), indicating that credential data - likely SSH keys, tokens, or authentication materials - is stored, transmitted, or logged in a manner accessible to local authenticated users without proper protection mechanisms such as encryption, secure memory handling, or access controls.

RemediationAI

No vendor-released patch version has been identified at time of analysis. The project maintainer has been notified via GitHub issue #42 but has not yet responded or released a fix. Immediate remediation steps: (1) upgrade to version 1.5.1 or later if a patched release becomes available (check GitHub releases regularly); (2) audit ssh-mcp command-line invocations in your environment to identify where credentials may be logged or exposed; (3) implement local access controls to restrict execution of ssh-mcp to trusted users only; (4) review shell history and process logs for plaintext credential exposure from ssh-mcp invocations and sanitize if necessary; (5) rotate any SSH keys or credentials that may have been visible through this vulnerability. Pending a vendor patch, compensating controls include: restricting file system permissions on ssh-mcp configuration and cache directories to prevent other local users from reading stored credentials, using environment variables instead of command-line arguments where possible to avoid process listing exposure, and monitoring /var/log and shell history for credential leakage.