Skip to content
Critical OS Command Injection Vulnerabilities in MCP Tools

Critical OS Command Injection Vulnerabilities in MCP Tools

First seen 28 Oct 2026, 06:49 UTC •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 28, 2026 at 07:49 UTC
  • •Two critical vulnerabilities (CVSS 9.8) in MCP tools allow OS command injection.
  • •Flaws stem from improper input sanitization in sf-mcp and mcp-ffmpeg tools.
  • •No patches are available, leaving systems exposed to potential exploitation.

Two critical vulnerabilities have been identified in MCP tools, affecting multiple command-line utilities. The first vulnerability in sf-mcp allows OS command injection through improperly sanitized flag values, enabling attackers to execute arbitrary commands. The second vulnerability in mcp-ffmpeg exposes three tools to command injection via user-controlled parameters passed directly to shell commands. Both vulnerabilities have a CVSS score of 9.8, indicating a critical risk. The flaws arise from insufficient input sanitization, leading to potential data exfiltration and system compromise. No patches have been reported as of now, leaving systems vulnerable. Users of the affected tools are advised to review their configurations and limit exposure. The vulnerabilities are categorized under CWE-78 for improper neutralization of special elements used in OS commands.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-28
Vulnerabilities disclosed
Critical OS command injection vulnerabilities were reported in sf-mcp and mcp-ffmpeg tools, affecting multiple command-line utilities.
github.com
2026-10-28
Severity assessment published
Both vulnerabilities were assigned a CVSS score of 9.8, indicating critical severity.
github.com

More articles in this cluster (2)

Extracted Entities (9)

1 / 4

Common questions

Which MCP tools are affected?
The vulnerabilities affect sf-mcp and mcp-ffmpeg tools, specifically their command-line utilities.
What is the severity of these vulnerabilities?
Both vulnerabilities have a CVSS score of 9.8, categorizing them as critical.
Are there any patches available?
No patches have been released yet for these vulnerabilities, leaving systems vulnerable.