AI agent vulnerability · Other MCP servers and tools

CVE-2026-25546: godot-mcp has Command Injection via unsanitized projectPath

highCVSS 3.1 7.8GHSA-8jx2-rhfh-q928

Impact A Command Injection vulnerability in godot-mcp allows remote code execution. The executeOperation function passed user-controlled input (e.g., projectPath) directly to exec(), which spawns a shell. An attacker could inject shell metacharacters like $(command) or &calc to execute arbitrary commands with the privileges of the MCP server process.

Published Feb 4, 2026 · Updated Feb 8, 2026

Affected packages

@coding-solo/godot-mcp

Ecosystem: npm
Affected: < 0.1.1
Fixed in: 0.1.1
Check: npm ls @coding-solo/godot-mcp

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

Impact

A Command Injection vulnerability in godot-mcp allows remote code execution. The executeOperation function passed user-controlled input (e.g., projectPath) directly to exec(), which spawns a shell. An attacker could inject shell metacharacters like $(command) or &calc to execute arbitrary commands with the privileges of the MCP server process.

This affects any tool that accepts projectPath, including create_scene, add_node, load_sprite, and others.

Patches

Fixed in version 0.1.1 by switching from exec() to execFile(), which does not invoke a shell.

Workarounds

None. Users should upgrade immediately.

Resources

https://github.com/Coding-Solo/godot-mcp/issues/64
https://github.com/Coding-Solo/godot-mcp/pull/67

Credited to TianYu-0829, wcole3, Coding-Solo.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More Other MCP servers and tools vulnerabilities

All Other MCP servers and tools entries