What’s Vulnerable › Products

sonirico mcp-shell vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your sonirico mcp-shell version is affected

Latest sonirico mcp-shell vulnerabilities

• CVE-2026-55582 — mcp-shell: Secure Mode Allowlist Bypass via Git Shell Alias (CVSS 8.4)
• CVE-2026-55581 — mcp-shell: Secure Mode Allowlist Bypass via Default `/bin/bash` Executable (CVSS 8.4)
• CVE-2026-55580 — mcp-shell — Security Disabled by Default in Bare-Binary Deploy Path + Shell Interpreter in Secure-Mode Allowlist (CVSS 8.6)
• CVE-2025-61489 — (CVSS 6.5)