CVE-2025-61492

Critical CVSS: 10.0

A command injection vulnerability in the execute_command function of terminal-controller-mcp 0.1.7 allows attackers to execute arbitrary commands via a crafted input.

Vendor

Gongrzhe

Product

Terminal-controller-mcp

CWE

CWE-77

Yayın Tarihi

2026-01-07 18:15:51

Güncelleme

2026-01-30 01:40:38

Source Identifier

cve@mitre.org

KEV Date Added

Kategoriler

CWE-77 Terminal-controller-mcp CRITICAL Gongrzhe 2026

Referanslar

https://github.com/GongRzhe/terminal-controller-mcp https://github.com/GongRzhe/terminal-controller-mcp/issues/7 https://github.com/cfdude/super-shell-mcp/issues/19