Vulnerability · Published Oct 27, 2026 · Assigned by VulnCheck
CVE-2026-117558ai-sdlc MCP Server through 0.31.2 Command Injection via check_issue and check_pr_status
High 7.8
In plain English
A high-severity OS command injection in ai-sdlc from ai-sdlc-framework. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 53% of all known vulnerabilities).
Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.7%top 47.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
The ai-sdlc plugin MCP server through 0.31.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying shell metacharacters in the repo argument. The unvalidated repo value is interpolated into gh issue view or gh pr view commands run via execSync(), letting prompt-injected agents execute commands as the MCP server user.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| ai-sdlc-framework | ai-sdlc | 0 – through 0.31.2 |
Weakness: CWE-78 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- GitHub Issue #1970 issue-tracking
- https://github.com/ai-sdlc-framework/ai-sdlc product
- https://github.com/ai-sdlc-framework/ai-sdlc/commit/717d7ecf068b714f65955e50fcf5cb4f9a0b5070 patch
- https://github.com/ai-sdlc-framework/ai-sdlc/blob/ai-sdlc-plugin-v0.31.2/ai-sdlc-plugin/mcp-server/src/tools/check-issue.ts#L15-L19 technical-description
- VulnCheck Advisory: ai-sdlc MCP Server through 0.31.2 Command Injection via check_issue and check_pr_status third-party-advisory