~ / search / GHSA-8jx2-rhfh-q928

GHSA-8jx2-rhfh-q928

godot-mcp has Command Injection via unsanitized projectPath

Source: GitHub Advisory Database (reviewed) High CVE-2026-25546

Packages

EcosystemPackageAffectedFixed in
npm @coding-solo/godot-mcp < 0.1.1 0.1.1

Details

As written in the advisory (Markdown source, shown as plain text).

### Impact A Command Injection vulnerability in godot-mcp allows remote code execution. The `executeOperation` function passed user-controlled input (e.g., `projectPath`) directly to `exec()`, which spawns a shell. An attacker could inject shell metacharacters like `$(command)` or `&calc` to execute arbitrary commands with the privileges of the MCP server process. This affects any tool that accepts `projectPath`, including `create_scene`, `add_node`, `load_sprite`, and others. ### Patches Fixed in version 0.1.1 by switching from `exec()` to `execFile()`, which does not invoke a shell. ### Workarounds None. Users should upgrade immediately. ### Resources - https://github.com/Coding-Solo/godot-mcp/issues/64 - https://github.com/Coding-Solo/godot-mcp/pull/67

References

External links from the advisory. They lead to third-party sites.