Live › vulnerability › CVE-2026-117573
Go to dashboardhagent, through commit 761eec6, passes the args parameter of its hagent_arduino and hagent_esp32 MCP tools into arduino-cli and idf.py commands run with shell=True. An MCP client, or an agent that was prompt-injected, can add shell metacharacters and run arbitrary commands as the MCP server user.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Teams that run the hagent MCP server, or connect an agent to it, at or before commit 761eec6. Exposure comes from any MCP client able to call the hagent_arduino or hagent_esp32 tools, including agents that read untrusted input. Teams that do not run hagent can skip it.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
hagent through commit 761eec6 contains an OS command injection vulnerability that allows MCP clients to execute shell commands by injecting metacharacters into the args parameter of the hagent_arduino and hagent_esp32 tools. Attackers or prompt-injected agents can supply crafted args interpolated into arduino-cli and idf.py commands run with subprocess.run(shell=True) to execute commands as the MCP server user.
This page as .md · .json · in your agent: get_signal("CVE-2026-117573")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.