Mcp Shell
1 CVEs
product
Monthly
A command injection vulnerability in the shell_exec function of sonirico mcp-shell v0.3.1 allows attackers to execute arbitrary commands via supplying a crafted command string. [CVSS 6.5 MEDIUM]
Command Injection
Mcp Shell
NVD
GitHub
CVSS 3.1
6.5
EPSS
11.1%
CVE-2025-61489
EPSS 11%
CVSS 6.5
MEDIUM
POC
THREAT
This Month
A command injection vulnerability in the shell_exec function of sonirico mcp-shell v0.3.1 allows attackers to execute arbitrary commands via supplying a crafted command string. [CVSS 6.5 MEDIUM]
Command Injection
Mcp Shell
NVD
GitHub