cli-mcp-server vulnerabilities

1 known vulnerability in cli-mcp-server from MladenSU. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  cli-mcp-server: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-85660Sep 4, 2026MladenSU

  cli-mcp-server 0.2.5 contains a command allowlist bypass vulnerability in the _validate_command_with_operators function when ALLOW_SHELL_OPERATORS is enabled. Attackers can use shell command substitution syntax like $(...) or backticks to execute non-allowlist