CVE-2026-117569— Kali-GPT through commit a608c74 OS Command Injection via MCP Scanner Tool Parameters

Quick assessment

Affected

alishahid74 kali-gpt

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Kali-GPT 在提交版本 a608c74 中存在操作系统命令注入漏洞。该漏洞位于文件中的函数，允许 MCP 客户端通过未经验证的扫描器参数执行任意命令。攻击者或遭受提示注入的代理可以在、、、或等参数中嵌入 Shell 元字符，这些参数会通过以模式执行，并以 MCP 服务器用户的身份运行。

CVSS 7.8 · High Updated Oct 27, 2026

Possible ATT&CK Techniques 3 AI

T1190 · Exploit Public-Facing Application T1203 · Exploitation for Client Execution T1059 · Command and Scripting Interpreter

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Kali-GPT through commit a608c74 OS Command Injection via MCP Scanner Tool Parameters

Source: CVE Program / CVE List V5

Vulnerability Description

Kali-GPT through commit a608c74 contains an OS command injection vulnerability in execute_tool() in kali_gpt/tools/mcp_server.py that allows MCP clients to run commands via unsanitized scanner parameters. Attackers or prompt-injected agents can embed shell metacharacters in parameters like target, ports, domain, wordlist, or url, executed via subprocess.run with shell=True as the MCP server user.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

OS命令中使用的特殊元素转义处理不恰当(OS命令注入)

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
alishahid74	kali-gpt	0 ~ a608c74e99910232dd208fee99de860458672b82	-

II. Public POCs for CVE-2026-117569

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-117569

请登录查看更多情报信息。

Other References for CVE-2026-117569 (4)

https://github.com/alishahid74/kali-gpt product
https://github.com/alishahid74/kali-gpt/blob/a608c74e99910232dd208fee99de860458672b82/kali_gpt/tools/mcp_server.py#L229-L356 technical-description
https://github.com/alishahid74/kali-gpt/issues/12 issue-tracking
https://www.vulncheck.com/advisories/kali-gpt-through-commit-a608c74-os-command-injection-via-mcp-scanner-tool-parameters third-party-advisory

https://www.cve.org/CVERecord?id=CVE-2026-117569

IV. Related Vulnerabilities

Same weakness: CWE-78