CVE-2026-25546

Godot MCP is a Model Context Protocol (MCP) server for interacting with the Godot game engine. Prior to version 0.1.1, a command injection vulnerability in godot-mcp allows remote code execution. The executeOperation function passed user-controlled input (e.g., projectPath) directly to exec(), which spawns a shell. An attacker could inject shell metacharacters like $(command) or &calc to execute arbitrary commands with the privileges of the MCP server process. This affects any tool that accepts projectPath, including create_scene, add_node, load_sprite, and others. This issue has been patched in version 0.1.1.

• CWE-78

• https://github.com/Coding-Solo/godot-mcp/commit/21c785d923cfdb471ea60323c13807d62dfecc5aPatch
• https://github.com/Coding-Solo/godot-mcp/issues/64Issue Tracking
• https://github.com/Coding-Solo/godot-mcp/pull/67Issue Tracking, Patch
• https://github.com/Coding-Solo/godot-mcp/security/advisories/GHSA-8jx2-rhfh-q928Vendor Advisory

Published

Feb 4, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-25540Mastodon is a free, open-source social network server based …6.5
• CVE-2026-25541Bytes is a utility library for working with bytes. From vers…7.5
• CVE-2026-25542Tekton Pipelines project provides k8s-style resources for de…6.5
• CVE-2026-25543HtmlSanitizer is a .NET library for cleaning HTML fragments …6.1
• CVE-2026-25544Payload is a free and open source headless content managemen…9.8
• CVE-2026-25545Astro is a web framework. Prior to version 9.5.4, Server-Sid…8.6
• CVE-2026-25547@isaacs/brace-expansion is a hybrid CJS/ESM TypeScript fork …9.2
• CVE-2026-25548InvoicePlane is a self-hosted open source application for ma…9.1
• CVE-2026-25549Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2026-2555A weakness has been identified in JeecgBoot 3.9.1. This vuln…7.5
• CVE-2026-25550Seagull Software BarTender 2010, 2016, and 2019 contain an u…9.8
• CVE-2026-25551Seagull Software BarTender 2021 R1 through 12.0.1 contains a…8.5