Github Kanban Mcp Server
Monthly
OS command injection in Sunwood-ai-labs github-kanban-mcp-server through version 0.4.0 lets an attacker who can influence the state or labels arguments of the handleListIssues tool inject shell metacharacters that reach an operating-system command (CWE-78). The flaw is network-reachable and unauthenticated per the assessed vector (CVSS:3.1/AV:N/AC:L/PR:N/UI:R), but it requires the operator or driving agent to invoke the issue-listing operation before the injected input executes, so it is not a fully autonomous remote trigger. Exploitation has not been confirmed in the wild and no public exploit code was identified at time of analysis; the vendor released version 0.4.1 plus commit 253d93bbdf7ee9fe42bd8fdf15feea93ae59cbae as the fix.
OS command injection in Sunwood-ai-labs github-kanban-mcp-server through version 0.4.0 lets an attacker who can influence the state or labels arguments of the handleListIssues tool inject shell metacharacters that reach an operating-system command (CWE-78). The flaw is network-reachable and unauthenticated per the assessed vector (CVSS:3.1/AV:N/AC:L/PR:N/UI:R), but it requires the operator or driving agent to invoke the issue-listing operation before the injected input executes, so it is not a fully autonomous remote trigger. Exploitation has not been confirmed in the wild and no public exploit code was identified at time of analysis; the vendor released version 0.4.1 plus commit 253d93bbdf7ee9fe42bd8fdf15feea93ae59cbae as the fix.