취약점 제보

OS command injection in the neo.mjs file-system MCP server (check_syntax / run_playwright_test)

MCP download_file writes fetched bytes to an unvalidated destination path

MCP start_kubeshark argument injection allows redirecting deployed images to an attacker-controlled registry

Self-upgrade runs an unsigned binary verified only by a same-origin digest (CWE-494) → RCE via a compromised mirror or MITM

PathFilter restricted-directory deny-list bypass via case and trailing dot/space equivalence

fast-agent serve binds HTTP to 0.0.0.0 with no authentication by default; with --shell this is unauthenticated remote command execution

MCP nginx_config_add skips config directive validation → authenticated nginx directive injection (RCE on the official image)

nginx config directive denylist (ValidateConfigFile) is bypassable via same-line ";" separation → authenticated directive injection (RCE on the official image)

SQL injection in mssql-mcp write tools via unparameterized table names and WHERE clauses (CWE-89)

pdf-reader-mcp: configured MCP_API_KEY / X-API-Key auth is silently not enforced -> unauthenticated PDF disclosure (HTTP mode)

Arbitrary file write via unconfined download and state paths (CWE-22)