Live › vulnerability › CVE-2026-117569
Go to dashboardKali-GPT's MCP server passes scanner parameters such as target, ports, domain, wordlist and url into subprocess.run with shell=True without sanitizing them. An MCP client, or a prompt-injected agent, can embed shell metacharacters to run arbitrary commands as the MCP server user.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Teams that run Kali-GPT and expose its MCP server to clients or agents, especially where the agent reads content an attacker can influence. Installations where the MCP server is not reachable by untrusted parties are less exposed. The sources do not say which deployment modes are most at risk.
No product ranges from the sources yet.
kali_gpt/tools/mcp_server.py in the deployed codea608c74 if the vulnerable code path is presentEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Kali-GPT through commit a608c74 contains an OS command injection vulnerability in execute_tool() in kali_gpt/tools/mcp_server.py that allows MCP clients to run commands via unsanitized scanner parameters. Attackers or prompt-injected agents can embed shell metacharacters in parameters like target, ports, domain, wordlist, or url, executed via subprocess.run with shell=True as the MCP server user.
This page as .md · .json · in your agent: get_signal("CVE-2026-117569")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.