godot-mcp has Command Injection via unsanitized projectPath

CAO 7.8CVE-2026-25546 · GHSA-8jx2-rhfh-q928 · Công bố 04/02/2026 · cập nhật 17/06/2026

Tóm tắt nhanh

CVE-2026-25546 là lỗ hổng mức CAO (CVSS 7.8) ảnh hưởng godot mcp (coding-solo), @coding-solo/godot-mcp.
Xác suất bị khai thác trong 30 ngày tới (EPSS): 0.95%, cao hơn 61.5% các lỗ hổng khác.
Cách xử lý: cập nhật lên 0.1.1 hoặc mới hơn.

Gói / sản phẩm	Phiên bản bị ảnh hưởng	Phiên bản đã vá
godot mcp coding-solo	`< 0.1.1`	`0.1.1`
@coding-solo/godot-mcp npm	`< 0.1.1`	`0.1.1`

Mô tả

Impact

A Command Injection vulnerability in godot-mcp allows remote code execution. The executeOperation function passed user-controlled input (e.g., projectPath) directly to exec(), which spawns a shell. An attacker could inject shell metacharacters like $(command) or &calc to execute arbitrary commands with the privileges of the MCP server process.

This affects any tool that accepts projectPath, including create_scene, add_node, load_sprite, and others.

Patches

Fixed in version 0.1.1 by switching from exec() to execFile(), which does not invoke a shell.

Workarounds

None. Users should upgrade immediately.

Resources

Mô tả của NVD

Godot MCP is a Model Context Protocol (MCP) server for interacting with the Godot game engine. Prior to version 0.1.1, a command injection vulnerability in godot-mcp allows remote code execution. The executeOperation function passed user-controlled input (e.g., projectPath) directly to exec(), which spawns a shell. An attacker could inject shell metacharacters like $(command) or &calc to execute arbitrary commands with the privileges of the MCP server process. This affects any tool that accepts projectPath, including create_scene, add_node, load_sprite, and others. This issue has been patched in version 0.1.1.