{"data":{"id":"8d4490e5-f779-4ea1-a7c6-813c266f2cb2","title":"GHSA-3x77-wg38-92r3: mcp-shell has a Secure Mode Allowlist Bypass via Default `/bin/bash` Executable","summary":"mcp-shell has a security flaw where its default configuration allows `/bin/bash` as an allowed command, but the validator only checks the first word of a command and ignores flags like `-c`. This means an attacker can send `/bin/bash -c <any-command>` to bypass the allowlist (a restrictions list) and run any command on the system, such as `id` or `curl`, with no authentication needed.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-3x77-wg38-92r3","publishedAt":"2026-08-25T15:41:30.000Z","cveId":"CVE-2026-55581","cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":["github.com/sonirico/mcp-shell@< 0.6.0 (fixed: 0.6.0)"],"affectedVendors":["HuggingFace"],"affectedVendorsRaw":["mcp-shell"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0,"patchAvailable":true,"disclosureDate":"2026-08-25T15:41:30.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["integrity","confidentiality","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":["AML.T0010"]}}