A critical OS command injection flaw in sonirico mcp-shell versions prior to 0.6.0 enables potential unauthorized command execution.

The application fails to properly neutralize special elements used in OS commands (CWE-78) and contains insecure default resource initialization (CWE-1188). This allows an unauthenticated attacker to inject and execute arbitrary shell commands.

The ability for an attacker to execute arbitrary OS commands provides a direct path to total system compromise. Given the CVSS score of 8.4, this vulnerability poses a severe risk to organizational infrastructure, potentially leading to unauthorized data access and complete loss of system control.

Immediate Action: Upgrade mcp-shell to version 0.6.0 or later to apply the necessary security patches.

Proactive Monitoring: Review audit logs for unauthorized shell command execution or unexpected spawned processes.

Compensating Controls: Use network segmentation and strictly control access to the mcp-shell service to minimize the attack surface.

Public Exploit Available: No (unknown)

Due to the confirmed existence of a proof-of-concept and the high CVSS score, immediate patching is required. Organizations should treat this as a high-priority update to ensure the security of their shell command execution environment.