{"data":{"id":"c133db58-b5e6-448c-878f-72b99ff60a16","title":"CVE-2026-117567: esp-mcp through commit 28afddf contains an OS command injection vulnerability that allows attackers to run arbitrary…","summary":"esp-mcp through commit 28afddf contains an OS command injection vulnerability that lets attackers run arbitrary commands by supplying shell metacharacters in MCP tool parameters. Attackers who influence agent tool calls through prompt injection can inject metacharacters into the target, port, project_path, or project_name values passed to asyncio.create_subprocess_shell, executing commands as the MCP server user.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-117567","publishedAt":"2026-10-27T14:16:39.173Z","cveId":"CVE-2026-117567","cweIds":["CWE-78"],"cvssScore":"7.8","cvssSeverity":"high","severity":"high","attackType":["prompt_injection","other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["esp-mcp","MCP server"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"esp-mcp OS command injection through MCP tool parameters","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"local","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0,"epssCheckedAt":"2026-10-27T18:10:55.609Z","kevDateAdded":null,"advisoryAliases":["GHSA-3w6w-vpcf-fv9h"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-27T18:11:00.087Z","patchAvailable":null,"disclosureDate":"2026-10-27T14:16:39.173Z","capecIds":["CAPEC-88"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0051"]}}