Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Packages
@coding-solo/godot-mcp
@coding-solo/godot-mcp vulnerabilities (npm)
1 vulnerability.
@coding-solo/godot-mcp
npm
Godot MCP is vulnerable to Command Injection via unsanitized projectPath
CVE-2026-25546
Public exploit
Fix available
7.8
High
February 4, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open