Evidence · DiggingBeagle record
GHSA-x5hq-gjxf-pgxm: ungated MCP inspection executes declared stdio server
Primary GitHub Security Lab advisory on imported workflow frontmatter and executable MCP inspection.
- Source role
- primary disclosure
Evidence record
Primary GitHub Security Lab advisory on imported workflow frontmatter and executable MCP inspection.
Claim-level citations (1)
- supportsgh-aw inspection could launch a workflow-declared MCP executable: GitHub Security Lab found a path from importing an untrusted workflow with MCP stdio frontmatter to running its declared executable through mcp-inspect in affected gh-aw versions before v0.91.12.
Summary; Details: ungated add and mcp-inspect; patched versions