CVE-2025-69256

The Serverless Framework is a framework for using AWS Lambda and other managed cloud services to build applications. Starting in version 4.29.0 and prior to version 4.29.3, a command injection vulnerability exists in the Serverless Framework's built-in MCP server package (@serverless/mcp). This vulnerability only affects users of the experimental MCP server feature (serverless mcp), which represents less than 0.1% of Serverless Framework users. The core Serverless Framework CLI and deployment functionality are not affected. The vulnerability is caused by the unsanitized use of input parameters within a call to `child_process.exec`, enabling an attacker to inject arbitrary system commands. Successful exploitation can lead to remote code execution under the server process's privileges. The server constructs and executes shell commands using unvalidated user input directly within command-line strings. This introduces the possibility of shell metacharacter injection (`|`, `>`, `&&`, etc.). Version 4.29.3 fixes the issue.

• CWE-77

• https://github.com/serverless/serverless/blob/6213453da7df375aaf12fb3522ab8870488fc59a/packages/mcp/src/tools/list-projects.js#L68Product
• https://github.com/serverless/serverless/commit/681ca039550c7169369f98780c6301a00f2dc4c4Patch
• https://github.com/serverless/serverless/releases/tag/sf-core%404.29.3Release Notes
• https://github.com/serverless/serverless/security/advisories/GHSA-rwc2-f344-q6w6Exploit, Mitigation, Vendor Advisory

Published

Dec 30, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-6925A vulnerability has been found in Dromara RuoYi-Vue-Plus 5.4…9.1
• CVE-2025-69250free5gc UDM provides Unified Data Management (UDM) for free5…7.5
• CVE-2025-69251free5gc UDM provides Unified Data Management (UDM) for free5…5.3
• CVE-2025-69252free5gc UDM provides Unified Data Management (UDM) for free5…7.5
• CVE-2025-69253free5GC is an open-source project for 5th generation (5G) mo…5.3
• CVE-2025-69255RustFS is a distributed object storage system built in Rust.…4
• CVE-2025-69257theshit is a command-line utility that automatically detects…6.7
• CVE-2025-69258A LoadLibraryEX vulnerability in Trend Micro Apex Central co…9.8
• CVE-2025-69259A message unchecked NULL return value vulnerability in Trend…7.5
• CVE-2025-6926Improper Authentication vulnerability in Wikimedia Foundatio…8.8
• CVE-2025-69260A message out-of-bounds read vulnerability in Trend Micro Ap…7.5
• CVE-2025-69261WasmEdge is a WebAssembly runtime. Prior to version 0.16.0-a…7.5