rails-mcp-server vulnerabilities

1 known vulnerability in rails-mcp-server from Maquina-app. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.4 High severity

  rails-mcp-server: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-81097Aug 27, 2026Maquina-app

  The execute_ruby tool is documented as a read-only Ruby sandbox and is enforced by a pattern denylist together with replacements for the process-spawning methods on Kernel. The pseudo-terminal library's spawn entry points are neither in the denylist nor replac