Evidence · DiggingBeagle record
esp-mcp MCP argument command injection advisory
Advisory for CVE-2026-117567 identifying asyncio.create_subprocess_shell with attacker-controlled MCP parameters through commit 28afddf. Affected package versions and patched releases are listed as unknown.
- Source role
- primary disclosure
Evidence record
Advisory for CVE-2026-117567 identifying asyncio.create_subprocess_shell with attacker-controlled MCP parameters through commit 28afddf. Affected package versions and patched releases are listed as unknown.
Claim-level citations (3)
- supportsesp-mcp passed tool arguments into a shell under the MCP server’s privileges: CVE-2026-117567 describes OS command injection in esp-mcp code through commit 28afddf.
Advisory; vulnerable commit range and OS command injection
- supportsesp-mcp passed tool arguments into a shell under the MCP server’s privileges: The scope of consequence is the tool host’s own privileges, not automatic elevation to unrelated machines or a documented mass exploitation event.
Advisory; attack requirements and impact description
- supportsesp-mcp passed tool arguments into a shell under the MCP server’s privileges: The published GitHub advisory does not identify a patched version and marks the affected version range unknown; it associates shell injection with target, port, project_path and project_name arguments.
Affected versions, Patched versions and Description, CVE-2026-117567