{"data":{"id":"adb30254-a827-4990-bfaf-c1c85556462b","title":"GHSA-74hp-mggr-hv58: mcp-shell has a Secure Mode Allowlist Bypass via Git Shell Alias","summary":"mcp-shell's secure mode, which restricts execution to an allowlist defined in security.yaml, can be bypassed through the shell_exec MCP tool. The default allowlist includes /usr/bin/git, and the metacharacter validator in security.go omits the ! character, which Git uses for shell aliases, so passing /usr/bin/git -c alias.pwn=!<command> yields arbitrary OS command execution as the mcp-shell process user, with no authentication required in the default Docker deployment.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-74hp-mggr-hv58","publishedAt":"2026-08-25T15:39:05.000Z","cveId":"CVE-2026-55582","cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["github.com/sonirico/mcp-shell@< 0.6.0 (fixed: 0.6.0)"],"affectedPackageNames":["github.com/sonirico/mcp-shell"],"affectedPackageRefs":["go:github.com/sonirico/mcp-shell"],"affectedVendors":[],"affectedVendorsRaw":["mcp-shell"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00267,"epssCheckedAt":"2026-11-04T12:08:35.127Z","kevDateAdded":null,"advisoryAliases":["GHSA-74hp-mggr-hv58"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-08-25T15:39:05.000Z","fixReleasedAt":"2026-06-14T11:30:25.000Z","daysToFix":-72,"fixCheckedAt":"2026-10-29T21:31:16.733Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"go","name":"github.com/sonirico/mcp-shell","fixedVersion":"0.6.0","matchedVersion":"v0.6.0","fixReleasedAt":"2026-06-14T11:30:25.000Z","daysToFix":-72,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:31:16.373Z"}]}}