The mcp-shell server is vulnerable to OS command injection, presenting a high risk of remote code execution on the host system.

This vulnerability involves improper neutralization of special elements used in an OS command (CWE-78). It allows an attacker to inject and execute arbitrary commands, posing a severe threat to the host environment.

A CVSS score of 8.6 reflects the extreme risk associated with OS command injection. If successfully exploited, an attacker could gain full control over the host system, leading to data exfiltration, malware installation, or total system compromise.

Immediate Action: Update mcp-shell to version 0.6.0 or newer to address the command injection flaw.

Proactive Monitoring: Inspect command execution logs and audit trails for anomalous, unauthorized, or suspicious system commands being executed by the mcp-shell service.

Compensating Controls: Apply strict input validation and command white-listing at the application level, and ensure the service runs with minimal OS-level permissions.

Public Exploit Available: No (exploit_available: false)

Due to the availability of a proof-of-concept and the high-impact nature of command injection, this update should be treated as a high-priority task. Organizations should apply the patch to mcp-shell version 0.6.0 immediately to prevent potential remote code execution.