Hagent
Monthly
OS command injection in the hagent MCP server (masc-ucsc/hagent, through commit 761eec6) lets an MCP client that can reach the hagent_arduino or hagent_esp32 tools run arbitrary shell commands as the MCP server user by placing shell metacharacters in the args parameter, which is interpolated into arduino-cli and idf.py command lines executed with subprocess.run(shell=True). The attacker must already hold the low-privileged position of an MCP client (or drive one through prompt injection), so this is local-vector code execution bounded by the server's account rather than a pre-authentication remote takeover, but any deployment that exposes these embedded-build tools to an untrusted or LLM-driven caller is fully compromised on confidentiality, integrity and availability. No public exploit code has been identified at time of analysis and there is no CISA KEV entry; the EUVD/VulnCheck disclosure and an upstream GitHub issue are the only public signals, and the vulnerability is tracked for patching this week.
OS command injection in the hagent MCP server (masc-ucsc/hagent, through commit 761eec6) lets an MCP client that can reach the hagent_arduino or hagent_esp32 tools run arbitrary shell commands as the MCP server user by placing shell metacharacters in the args parameter, which is interpolated into arduino-cli and idf.py command lines executed with subprocess.run(shell=True). The attacker must already hold the low-privileged position of an MCP client (or drive one through prompt injection), so this is local-vector code execution bounded by the server's account rather than a pre-authentication remote takeover, but any deployment that exposes these embedded-build tools to an untrusted or LLM-driven caller is fully compromised on confidentiality, integrity and availability. No public exploit code has been identified at time of analysis and there is no CISA KEV entry; the EUVD/VulnCheck disclosure and an upstream GitHub issue are the only public signals, and the vulnerability is tracked for patching this week.