Mcp Ffmpeg
Monthly
OS command injection in the mcp-ffmpeg server (versions through 1.0.5) lets an attacker who can influence the videoPath or outputDir arguments of the resize-video, extract-audio, or get-video-info tools break out of the child_process.exec command string and run arbitrary shell commands as the user running the MCP server. The breakout characters ($(), backticks, or a closing double quote) must be carried inside a path or an already-existing file/directory name that the tool forwards into the exec string, which is why the CVSS 4.0 vector is scored 7.3 High with AV:L, AC:H, AT:P and PR:L rather than as a trivial remote unauthenticated RCE. No CISA KEV listing and no public exploit code were identified at time of analysis; the priority label is 'this week', and the practical blast radius is bounded by the privileges of the MCP server account.
OS command injection in the mcp-ffmpeg server (versions through 1.0.5) lets an attacker who can influence the videoPath or outputDir arguments of the resize-video, extract-audio, or get-video-info tools break out of the child_process.exec command string and run arbitrary shell commands as the user running the MCP server. The breakout characters ($(), backticks, or a closing double quote) must be carried inside a path or an already-existing file/directory name that the tool forwards into the exec string, which is why the CVSS 4.0 vector is scored 7.3 High with AV:L, AC:H, AT:P and PR:L rather than as a trivial remote unauthenticated RCE. No CISA KEV listing and no public exploit code were identified at time of analysis; the priority label is 'this week', and the practical blast radius is bounded by the privileges of the MCP server account.