Vulnerability · Published Oct 27, 2026 · Assigned by VulnCheck

CVE-2026-117567esp-mcp through commit 28afddf OS Command Injection via MCP Tool Parameters

High 7.8

In plain English

A high-severity OS command injection in esp-mcp from horw. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 51% of all known vulnerabilities).

Severity (CVSS 3.1)7.8High

Exploit odds (30 days)0.7%top 48.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

esp-mcp through commit 28afddf contains an OS command injection vulnerability that allows attackers to run arbitrary commands by supplying shell metacharacters in MCP tool parameters. Attackers influencing agent tool calls through prompt injection can inject metacharacters into target, port, project_path, or project_name values passed to asyncio.create_subprocess_shell, executing commands as the MCP server user.

Affected products (as reported)

Vendor	Product	Versions
horw	esp-mcp	0 – through 28afddf9ff41ada117bb45fd49b526d3bf89749e

Weakness: CWE-78 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

GitHub Issue #49 issue-tracking
https://github.com/horw/esp-mcp product
https://github.com/horw/esp-mcp/blob/28afddf9ff41ada117bb45fd49b526d3bf89749e/main.py#L80 technical-description
VulnCheck Advisory: esp-mcp through commit 28afddf OS Command Injection via MCP Tool Parameters third-party-advisory