VYPR

Mac Shell Mcp

by Cfdude

CVEs (1)

  • CVE-2026-108953HigOct 12, 2026
    risk 0.44cvss 7.8epss 0.01

    mac-shell-mcp before 2.0.0 contains an OS command injection vulnerability that allows MCP clients to bypass the command whitelist by injecting shell metacharacters into execute_command arguments. Attackers or malicious prompts can call a safe command such as pwd with arguments…