Esp Mcp
Monthly
OS command injection in the esp-mcp MCP server (all versions through commit 28afddf9ff41ada117bb45fd49b526d3bf89749e) lets an attacker who can influence LLM agent tool calls - typically through prompt injection - place shell metacharacters into the target, port, project_path or project_name parameters, which are handed to asyncio.create_subprocess_shell at main.py line 80; the injected commands then execute as the user running the MCP server. The assessed vector is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (8.5), so exploitation presupposes low-privileged access to the tool interface plus an agent deployment that actually exposes these tools and accepts attacker-influenced input, rather than a network-reachable default path; no public exploit has been identified at time of analysis and no fixed version is identified in the supplied data. Overall risk signals are mixed, indicating a real but non-urgent and narrowly-scoped issue that should be scheduled for this week rather than treated as an emergency.
OS command injection in the esp-mcp MCP server (all versions through commit 28afddf9ff41ada117bb45fd49b526d3bf89749e) lets an attacker who can influence LLM agent tool calls - typically through prompt injection - place shell metacharacters into the target, port, project_path or project_name parameters, which are handed to asyncio.create_subprocess_shell at main.py line 80; the injected commands then execute as the user running the MCP server. The assessed vector is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (8.5), so exploitation presupposes low-privileged access to the tool interface plus an agent deployment that actually exposes these tools and accepts attacker-influenced input, rather than a network-reachable default path; no public exploit has been identified at time of analysis and no fixed version is identified in the supplied data. Overall risk signals are mixed, indicating a real but non-urgent and narrowly-scoped issue that should be scheduled for this week rather than treated as an emergency.