MladenSU vulnerabilities
We track 1 vulnerability in MladenSU products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 4, 2026.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest MladenSU vulnerabilities
- 8.1 High severity
cli-mcp-server: Improper Neutralization of Special Elements used in an OS Command
cli-mcp-server 0.2.5 contains a command allowlist bypass vulnerability in the _validate_command_with_operators function when ALLOW_SHELL_OPERATORS is enabled. Attackers can use shell command substitution syntax like $(...) or backticks to execute non-allowlist