CVE-2026-108953
High
Description
mac-shell-mcp before 2.0.0 contains an OS command injection vulnerability that allows MCP clients to bypass the command whitelist by injecting shell metacharacters into execute_command arguments. Attackers or malicious prompts can call a safe command such as pwd with arguments like ';' to run forbidden commands as the server user without approval.
SeverityHigh
CVSS7.8
Exploit probability—
ProductCfdude Mac-shell-mcp
PublishedOct 12, 2026
First seenOct 12, 2026
Weakness typeCWE-78OS command injection
How to fix
Update
- cfdude mac-shell-mcp2.0.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cfdude mac-shell-mcp | v < 2.0.0 | 2.0.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.