{"data":{"id":"5ea18f91-7842-409d-aebd-80740d5fb0c5","title":"CVE-2026-117558: The ai-sdlc plugin MCP server through 0.31.2 contains an OS command injection vulnerability that allows attackers to…","summary":"The ai-sdlc plugin MCP server through 0.31.2 contains an OS command injection vulnerability. Attackers can run commands by supplying shell metacharacters in the repo argument, which is interpolated unvalidated into gh issue view or gh pr view commands executed via execSync(). Prompt-injected agents can trigger this, executing commands as the MCP server user.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-117558","publishedAt":"2026-10-27T14:16:37.840Z","cveId":"CVE-2026-117558","cweIds":["CWE-78"],"cvssScore":"7.8","cvssSeverity":"high","severity":"high","attackType":["prompt_injection","other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["ai-sdlc plugin","MCP server"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"ai-sdlc plugin MCP server OS command injection via repo argument","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"local","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0,"epssCheckedAt":"2026-10-27T18:10:55.314Z","kevDateAdded":null,"advisoryAliases":["GHSA-f89j-j8x9-5xwf"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-27T18:11:01.347Z","patchAvailable":null,"disclosureDate":"2026-10-27T14:16:37.840Z","capecIds":["CAPEC-88"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0051"]}}