Cli Mcp Server
Monthly
Command allowlist bypass in cli-mcp-server 0.2.5 lets callers of this Model Context Protocol server run arbitrary, non-allowlisted commands by embedding shell command substitution ($(...) or backticks) inside an otherwise-permitted command. The flaw lives in _validate_command_with_operators and is only reachable when the ALLOW_SHELL_OPERATORS option is enabled, at which point the ALLOWED_COMMANDS safelist is effectively defeated. Reported by VulnCheck with a CVSS 4.0 score of 9.2; no public exploit identified at time of analysis, though the technique is trivially derivable from the advisory.
Command allowlist bypass in cli-mcp-server 0.2.5 lets callers of this Model Context Protocol server run arbitrary, non-allowlisted commands by embedding shell command substitution ($(...) or backticks) inside an otherwise-permitted command. The flaw lives in _validate_command_with_operators and is only reachable when the ALLOW_SHELL_OPERATORS option is enabled, at which point the ALLOWED_COMMANDS safelist is effectively defeated. Reported by VulnCheck with a CVSS 4.0 score of 9.2; no public exploit identified at time of analysis, though the technique is trivially derivable from the advisory.