CVE-2025-61489

n/a / n/a PUBLISHED

Description (CNA)

A command injection vulnerability in the shell_exec function of sonirico mcp-shell v0.3.1 allows attackers to execute arbitrary commands via supplying a crafted command string.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://github.com/sonirico/mcp-shell
https://github.com/sonirico/mcp-shell/issues/4

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.