Evidence · DiggingBeagle record
GHSA-f7r8-5pqp-q5p4: MCP argument flags escape gh-aw tool schema
GitHub Security Lab advisory with affected handler list, controlled argument parser tests, and patched v0.91.12.
- Source role
- primary disclosure
Evidence record
GitHub Security Lab advisory with affected handler list, controlled argument parser tests, and patched v0.91.12.
Claim-level citations (1)
- supportsgh-aw MCP arguments reinterpreted as privileged command flags: GitHub Security Lab documented that MCP client strings could be parsed as gh-aw command-line options before v0.91.12, including flags to disable scanning or approve changes.
Summary; Details: Argv flag injection; Patched release