CVE-2026-117567— esp-mcp through commit 28afddf OS Command Injection via MCP Tool Parameters

Quick assessment

Affected

horw esp-mcp

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在提交 28afddf 之前的 esp-mcp 版本中存在一个操作系统命令注入漏洞。攻击者可以通过在 MCP 工具参数中提供 Shell 元字符，执行任意命令。若攻击者通过提示注入（prompt injection）影响代理的工具调用，即可将元字符注入到传递给的、、或等参数中，从而以 MCP 服务器用户的身份执行命令。

CVSS 7.8 · High Updated Oct 27, 2026

Possible ATT&CK Techniques 3 AI

T1203 · Exploitation for Client Execution T1055.001 · Dynamic-link Library Injection T1059.004 · Unix Shell

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

esp-mcp through commit 28afddf OS Command Injection via MCP Tool Parameters

Source: CVE Program / CVE List V5

Vulnerability Description

esp-mcp through commit 28afddf contains an OS command injection vulnerability that allows attackers to run arbitrary commands by supplying shell metacharacters in MCP tool parameters. Attackers influencing agent tool calls through prompt injection can inject metacharacters into target, port, project_path, or project_name values passed to asyncio.create_subprocess_shell, executing commands as the MCP server user.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

OS命令中使用的特殊元素转义处理不恰当(OS命令注入)

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
horw	esp-mcp	0 ~ 28afddf9ff41ada117bb45fd49b526d3bf89749e	-

II. Public POCs for CVE-2026-117567

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-117567

请登录查看更多情报信息。

Other References for CVE-2026-117567 (4)

https://github.com/horw/esp-mcp/blob/28afddf9ff41ada117bb45fd49b526d3bf89749e/main.py#L80 technical-description
https://github.com/horw/esp-mcp product
https://github.com/horw/esp-mcp/issues/49 issue-tracking
https://www.vulncheck.com/advisories/esp-mcp-through-commit-28afddf-os-command-injection-via-mcp-tool-parameters third-party-advisory

https://www.cve.org/CVERecord?id=CVE-2026-117567

IV. Related Vulnerabilities

Same weakness: CWE-78