GitStock

coding-solo/godot-mcp · Security

godot-mcp has Command Injection via unsanitized projectPath

GHSA ID
GHSA-8jx2-rhfh-q928
CVE ID
CVE-2026-25546
Severity
high
Published
Updated
CVSS
7.8 · CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v3
7.8 · CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

Impact

A Command Injection vulnerability in godot-mcp allows remote code execution. The executeOperation function passed user-controlled input (e.g., projectPath) directly to exec(), which spawns a shell. An attacker could inject shell metacharacters like $(command) or &calc to execute arbitrary commands with the privileges of the MCP server process.

This affects any tool that accepts projectPath, including create_scene, add_node, load_sprite, and others.

Patches

Fixed in version 0.1.1 by switching from exec() to execFile(), which does not invoke a shell.

Workarounds

None. Users should upgrade immediately.

Resources

CWEs

  • CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

References

Open GitHub