All vulnerabilities

CVE-2026-NONE · GHSA-v8jh-gv7v-3gvq

ssh-mcp: command-substitution classifier bypass lets a 'safe'-only role run unapproved root commands

highCVSS 8.8CWE-863

Vendor

tufantunc

Package

ssh-mcp npm

Affected

>= 2.0.0, < 2.4.1

Fixed in

2.4.1

Disclosed

2026-08-25

Credit

Avishai Gonen

auth-bypassmcpcommand-injection

Published advisory