Sonirico vulnerabilities

Products

• Mcp-shell 4

Newest

• sonirico mcp-shell mcp-shell — Security Disabled by Default in Bare-Binary Deploy Path + Shell Interpreter in Secure-Mode Allowlist CVE-2026-55580 Fix available 8.6 HighAugust 25, 2026
• sonirico mcp-shell mcp-shell: Secure Mode Allowlist Bypass via Default `/bin/bash` Executable CVE-2026-55581 Fix available 8.4 HighAugust 25, 2026
• sonirico mcp-shell mcp-shell: Secure Mode Allowlist Bypass via Git Shell Alias CVE-2026-55582 Fix available 8.4 HighAugust 25, 2026
• sonirico mcp-shell A command injection vulnerability in the shell_exec function of sonirico mcp-shell v0.3.1 allows... CVE-2025-61489 6.5 MediumJanuary 7, 2026