godot-mcp has Command Injection via unsanitized projectPath

高 7.8CVE-2026-25546 · GHSA-8jx2-rhfh-q928 · 04/02/2026 公開 · 17/06/2026 更新

要点

CVE-2026-25546 は godot mcp (coding-solo), @coding-solo/godot-mcp に影響する深刻度「高」 (CVSS 7.8) の脆弱性です。
今後30日間に悪用される確率（EPSS）：0.95%（全脆弱性の 61.5% より高い）。
対処：0.1.1 以降に更新してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
godot mcp coding-solo	`< 0.1.1`	`0.1.1`
@coding-solo/godot-mcp npm	`< 0.1.1`	`0.1.1`

概要

Impact

A Command Injection vulnerability in godot-mcp allows remote code execution. The executeOperation function passed user-controlled input (e.g., projectPath) directly to exec(), which spawns a shell. An attacker could inject shell metacharacters like $(command) or &calc to execute arbitrary commands with the privileges of the MCP server process.

This affects any tool that accepts projectPath, including create_scene, add_node, load_sprite, and others.

Patches

Fixed in version 0.1.1 by switching from exec() to execFile(), which does not invoke a shell.

Workarounds

None. Users should upgrade immediately.

Resources

NVD の説明

Godot MCP is a Model Context Protocol (MCP) server for interacting with the Godot game engine. Prior to version 0.1.1, a command injection vulnerability in godot-mcp allows remote code execution. The executeOperation function passed user-controlled input (e.g., projectPath) directly to exec(), which spawns a shell. An attacker could inject shell metacharacters like $(command) or &calc to execute arbitrary commands with the privileges of the MCP server process. This affects any tool that accepts projectPath, including create_scene, add_node, load_sprite, and others. This issue has been patched in version 0.1.1.