Sunwood-ai-labs vulnerabilities
We track 2 vulnerabilities in Sunwood-ai-labs products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 1, 2026.
2vulnerabilities
0critical
2high
0exploited
8.1average CVSS score
Latest Sunwood-ai-labs vulnerabilities
- 7.3 High severity
command-executor-mcp-server: Improper Neutralization of Special Elements used in a Command
A security vulnerability has been detected in Sunwood-ai-labs command-executor-mcp-server up to 0.1.0. This impacts the function execute_command of the file src/index.ts of the component MCP Interface. The manipulation leads to os command injection. Remote exp
- 8.9 High severity
github-kanban-mcp-server: Improper Neutralization of Special Elements used in an OS Command
GitHub Kanban MCP Server is a Model Context Protocol (MCP) server for managing GitHub issues in Kanban board format and streamlining LLM task management. Version 0.3.0 of the MCP Server is written in a way that is vulnerable to command injection vulnerability