OS Command Injection in esp-mcp Affecting MCP Tool Functionality
CVE-2026-117567

8.5HIGH

Key Information:

Vendor

Horw

Status
Esp-mcp
Vendor
CVE Published:
27 October 2026

What is CVE-2026-117567?

The esp-mcp tool is vulnerable to OS command injection, allowing attackers to execute arbitrary commands by manipulating parameters in the MCP tool. Specifically, by injecting shell metacharacters into values such as target, port, project_path, or project_name, attackers can exploit the asyncio.create_subprocess_shell function, potentially gaining control over the system as the MCP server user. This vulnerability emphasizes the need for secure coding practices and input validation in applications utilizing system-level command execution.

Affected Version(s)

esp-mcp 0 <= 28afddf9ff41ada117bb45fd49b526d3bf89749e

References

https://github.com/horw/esp-mcp/issues/49
issue-tracking
https://github.com/horw/esp-mcp
product
https://github.com/horw/esp-mcp/blob/28afddf9ff41ada117bb...
technical-description

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Nguyễn Văn Tiến
.