sonirico/mcp-shell Security Advisories | GitStock

high2026-08-25

mcp-shell — Security Disabled by Default in Bare-Binary Deploy Path + Shell Interpreter in Secure-Mode Allowlist

GHSA-f5pj-2738-996m · CVE-2026-55580

high2026-08-25

mcp-shell has a Secure Mode Allowlist Bypass via Default `/bin/bash` Executable

GHSA-3x77-wg38-92r3 · CVE-2026-55581

high2026-08-25

mcp-shell has a Secure Mode Allowlist Bypass via Git Shell Alias

GHSA-74hp-mggr-hv58 · CVE-2026-55582