{"data":{"id":"7af4dea7-59a0-4c6b-9c85-237e540cc4fc","title":"GHSA-f5pj-2738-996m: mcp-shell — Security Disabled by Default in Bare-Binary Deploy Path + Shell Interpreter in Secure-Mode Allowlist","summary":"mcp-shell at commit 17ac0eef5c9a5a42b8fb132d3d034973d55a5433 ships with its security layer disabled: config.go sets SecurityConfig Enabled to false, and the from-source install path and MCP client example never set MCP_SHELL_SEC_CONFIG_FILE, so any connected LLM can call shell_exec with arbitrary commands. Separately, the official security.yaml baked into the Docker image lists /bin/bash and /usr/bin/python3 in allowed_executables, so secure mode can be bypassed by calling /bin/bash -i, which passes validation and yields an interactive shell.","solution":"Flip the default to SecurityConfig{Enabled: true}, making secure mode the operating default, and keep unrestricted mode behind an affirmative opt-in flag or environment variable such as --allow-unsafe.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-f5pj-2738-996m","publishedAt":"2026-08-25T15:46:50.000Z","cveId":"CVE-2026-55580","cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["github.com/sonirico/mcp-shell@< 0.6.0 (fixed: 0.6.0)"],"affectedPackageNames":["github.com/sonirico/mcp-shell"],"affectedPackageRefs":["go:github.com/sonirico/mcp-shell"],"affectedVendors":[],"affectedVendorsRaw":["mcp-shell"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00197,"epssCheckedAt":"2026-11-05T06:10:15.115Z","kevDateAdded":null,"advisoryAliases":["GHSA-f5pj-2738-996m"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-08-25T15:46:50.000Z","fixReleasedAt":"2026-06-14T11:30:25.000Z","daysToFix":-72,"fixCheckedAt":"2026-10-29T21:31:15.046Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"go","name":"github.com/sonirico/mcp-shell","fixedVersion":"0.6.0","matchedVersion":"v0.6.0","fixReleasedAt":"2026-06-14T11:30:25.000Z","daysToFix":-72,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:31:14.901Z"}]}}