Which versions of command-executor-mcp-server are affected by CVE-2026-7593?

Sunwood-ai-labs command-executor-mcp-server versions up to 0.1.0 contains an unauthenticated remote command injection vulnerability that allows attackers to execute arbitrary system commands without…

Is there a public PoC exploit available for CVE-2026-7593?

Yes, a public proof-of-concept exploit is available for CVE-2026-7593. Prioritise patching immediately. EPSS: 1.0%.

How to fix or mitigate CVE-2026-7593?

Within 24 hours: identify all instances of command-executor-mcp-server running in production and development environments using version 0.1.0 or earlier; document inventory and assess business criticality. Within 7 days: discontinue use of affected versions by isolating or decommissioning instances; contact Sunwood-ai-labs for patch availability timeline and interim guidance. Within 30 days: once patches are released, deploy patched versions across all environments after validation testing; implement network segmentation to restrict MCP server access to authorized internal systems only.

command-executor-mcp-server CVE-2026-7593

Q: What is the CVSS score of CVE-2026-7593?

CVE-2026-7593 has a CVSS 4.0 base score of 5.5 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 1.0%.

EUVD-2026-26717 MEDIUM

OS Command Injection (CWE-78)

2026-05-01 VulDB

Command Injection Command Executor Mcp Server

5.5

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

5.5 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Severity Changed

May 01, 2026 - 21:22 NVD

HIGH MEDIUM

CVSS changed

May 01, 2026 - 21:22 NVD

7.3 (HIGH) 5.5 (MEDIUM)

PoC Detected

May 01, 2026 - 21:16 vuln.today

Public exploit code

Analysis Generated

May 01, 2026 - 21:00 vuln.today

EUVD ID Assigned

May 01, 2026 - 20:31 euvd

EUVD-2026-26717

Analysis Generated

May 01, 2026 - 20:31 vuln.today

CVE Published

May 01, 2026 - 20:15 nvd

MEDIUM 5.5

DescriptionCVE.org

A security vulnerability has been detected in Sunwood-ai-labs command-executor-mcp-server up to 0.1.0. This impacts the function execute_command of the file src/index.ts of the component MCP Interface. The manipulation leads to os command injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.

AnalysisAI

OS command injection in Sunwood-ai-labs command-executor-mcp-server versions up to 0.1.0 allows remote unauthenticated attackers to execute arbitrary system commands via the MCP interface execute_command function. The vulnerability carries a CVSS score of 7.3 with a complete remote attack vector (AV:N/AC:L/PR:N/UI:N), enabling unauthorized data access, system modification, and service disruption. A proof-of-concept exploit has been publicly disclosed via GitHub issue #6, significantly lowering the barrier to exploitation. EPSS data not available, but public POC availability and unauthenticated remote vector indicate elevated real-world risk despite the moderate CVSS score.

Technical ContextAI

The vulnerability exists in the execute_command function within src/index.ts of the MCP (Model Context Protocol) interface implementation. Command-executor-mcp-server is a server component that provides command execution capabilities through the MCP protocol, commonly used for AI/LLM tool integration. The flaw is classified as CWE-78 (OS Command Injection), meaning user-controlled input is passed to system command execution functions without proper sanitization or validation. The MCP interface likely accepts structured command requests and executes them on the underlying operating system, but fails to neutralize special elements that could modify the intended command structure (such as shell metacharacters, command separators, or injection sequences). This architectural pattern-exposing command execution through a network interface-creates inherent risk when input validation is insufficient.

RemediationAI

No vendor-released patch identified at time of analysis-the project maintainers have not responded to the vulnerability disclosure reported via GitHub issue #6 (https://github.com/Sunwood-ai-labs/command-executor-mcp-server/issues/6). Organizations using command-executor-mcp-server should immediately implement compensating controls: (1) Remove network exposure by binding the MCP interface to localhost only or placing behind authenticated reverse proxy with strict access controls-this eliminates remote attack vector but breaks distributed AI tool integration scenarios. (2) Implement application-layer input validation using allowlists for permitted commands and arguments, rejecting any input containing shell metacharacters (;|&$`\n<>), though this risks breaking legitimate command functionality and requires comprehensive testing. (3) Deploy the service in a heavily restricted container or sandbox environment with minimal privileges, read-only filesystem mounts where possible, and no network egress-limits post-exploitation impact but adds operational complexity. (4) Monitor for project updates at https://github.com/Sunwood-ai-labs/command-executor-mcp-server/ and VulDB entry https://vuldb.com/vuln/360546 for patch releases. If command execution functionality is not critical to operations, consider migrating to alternative MCP server implementations with established security track records.