{"data":{"id":"c5f8ab8b-cee6-4d87-9a66-d66111fdc67f","title":"CVE-2026-108953: mac-shell-mcp before 2.0.0 contains an OS command injection vulnerability that allows MCP clients to bypass the command…","summary":"mac-shell-mcp before 2.0.0 contains an OS command injection flaw in its execute_command arguments. Attackers or malicious prompts can pass shell metacharacters, such as ';' after a whitelisted command like pwd, to run forbidden commands as the server user without approval, bypassing the command whitelist.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-108953","publishedAt":"2026-10-12T13:17:28.307Z","cveId":"CVE-2026-108953","cweIds":["CWE-78"],"cvssScore":"7.8","cvssSeverity":"high","severity":"high","attackType":["jailbreak","other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["mac-shell-mcp"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"mac-shell-mcp OS command injection through execute_command arguments","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"local","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0,"epssCheckedAt":"2026-10-12T18:08:44.534Z","kevDateAdded":null,"advisoryAliases":["GHSA-ffv7-8x5h-5w7r"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-12T18:08:48.972Z","patchAvailable":null,"disclosureDate":"2026-10-12T13:17:28.307Z","capecIds":["CAPEC-88"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"plugin","llmSpecific":true,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":["AML.T0054"]}}