CVE-2025-53100
Last modified
CVE-2025-53100 is a high-severity vulnerability rated 8.6/10 on the CVSS scale. RestDB's Codehooks.io MCP Server is an MCP server on the Codehooks.io platform. Prior to version 0.2.2, the MCP server is written in a way that is vulnerable to command injection attacks as part of some of its MCP Server tools definition and implementation. EPSS estimates a 1.30% chance of exploitation in the next 30 days.
Description
RestDB's Codehooks.io MCP Server is an MCP server on the Codehooks.io platform. Prior to version 0.2.2, the MCP server is written in a way that is vulnerable to command injection attacks as part of some of its MCP Server tools definition and implementation. This could result in a user initiated remote command injection attack on a running MCP Server. This issue has been patched in version 0.2.2.
Metrics
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2025-53100?
How severe is CVE-2025-53100?
How do I fix CVE-2025-53100?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-53095Sunshine is a self-hosted game stream host for Moonlight. Pr…8.8
- CVE-2025-53096Sunshine is a self-hosted game stream host for Moonlight. Pr…6.1
- CVE-2025-53097Roo Code is an AI-powered autonomous coding agent. Prior to …7.5
- CVE-2025-53098Roo Code is an AI-powered autonomous coding agent. The proje…8.1
- CVE-2025-53099Sentry is a developer-first error tracking and performance m…7.5
- CVE-2025-5310Dover Fueling Solutions ProGauge MagLink LX Consoles expose …9.8
- CVE-2025-53101ImageMagick is free and open-source software used for editin…9.8
- CVE-2025-53102Discourse is an open-source community discussion platform. P…9.8
- CVE-2025-53103JUnit is a testing framework for Java and the JVM. From vers…5.8
- CVE-2025-53104gluestack-ui is a library of copy-pasteable components & pat…9.1
- CVE-2025-53105GLPI, which stands for Gestionnaire Libre de Parc Informatiq…7.5
- CVE-2025-53106Graylog is a free and open log management platform. In versi…8.8
Are you affected by CVE-2025-53100?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST