CVE-2025-54073

mcp-package-docs is an MCP (Model Context Protocol) server that provides LLMs with efficient access to package documentation across multiple programming languages and language server protocol (LSP) capabilities. A command injection vulnerability exists in the `mcp-package-docs` MCP Server prior to the fix in commit cb4ad49615275379fd6f2f1cf1ec4731eec56eb9. The vulnerability is caused by the unsanitized use of input parameters within a call to `child_process.exec`, enabling an attacker to inject arbitrary system commands. Successful exploitation can lead to remote code execution under the server process's privileges. The server constructs and executes shell commands using unvalidated user input directly within command-line strings. This introduces the possibility of shell metacharacter injection (`|`, `>`, `&&`, etc.). Commit cb4ad49615275379fd6f2f1cf1ec4731eec56eb9 in version 0.1.27 contains a fix for the issue, but upgrading to 0.1.28 is recommended.

• CWE-77

• https://equixly.com/blog/2025/03/29/mcp-server-new-security-nightmare
• https://github.com/advisories/GHSA-3q26-f695-pp76
• https://github.com/advisories/GHSA-5w57-2ccq-8w95
• https://github.com/advisories/GHSA-gjv4-ghm7-q58q
• https://github.com/sammcj/mcp-package-docs/commit/cb4ad49615275379fd6f2f1cf1ec4731eec56eb9
• https://github.com/sammcj/mcp-package-docs/releases/tag/v0.1.27
• https://github.com/sammcj/mcp-package-docs/releases/tag/v0.1.28
• https://github.com/sammcj/mcp-package-docs/security/advisories/GHSA-vf9j-h32g-2764
• https://invariantlabs.ai/blog/mcp-github-vulnerability
• https://github.com/advisories/GHSA-3q26-f695-pp76
• https://github.com/advisories/GHSA-5w57-2ccq-8w95
• https://github.com/advisories/GHSA-gjv4-ghm7-q58q
• https://github.com/sammcj/mcp-package-docs/security/advisories/GHSA-vf9j-h32g-2764

Published

Jul 18, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-54066DiracX-Web is a web application that provides an interface t…4.7
• CVE-2025-54068Livewire is a full-stack framework for Laravel. In Livewire …9.8
• CVE-2025-5407A vulnerability has been found in chaitak-gorai Blogbook up …5.4
• CVE-2025-54070OpenZeppelin Contracts is a library for secure smart contrac…6.9
• CVE-2025-54071RomM (ROM Manager) allows users to scan, enrich, browse and …9.4
• CVE-2025-54072yt-dlp is a feature-rich command-line audio/video downloader…8.1
• CVE-2025-54074Cherry Studio is a desktop client that supports for multiple…9.8
• CVE-2025-54075MDC is a tool to take regular Markdown and write documents i…8.3
• CVE-2025-54076WeGIA is an open source web manager with a focus on the Port…6.1
• CVE-2025-54077WeGIA is an open source web manager with a focus on the Port…6.1
• CVE-2025-54078WeGIA is an open source web manager with a focus on the Port…6.1
• CVE-2025-54079WeGIA is an open source web manager with a focus on the Port…8.8