Sunwood-ai-labs github-kanban-mcp-server issue-handlers.ts handleListIssues os command injection
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fix or patch referenced
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
The github-kanban-mcp-server software from Sunwood-ai-labs, specifically its issue-listing handler for GitHub issues, is affected by this flaw. A remote attacker who can manipulate the state or labels input could run arbitrary operating system commands on the host running the server.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
A vulnerability was identified in Sunwood-ai-labs github-kanban-mcp-server up to 0.4.0. Impacted is the function handleListIssues of the file src/handlers/issue-handlers.ts. Such manipulation of the argument state/labels leads to os command injection. The attack can be launched remotely. Upgrading to version 0.4.1 is recommended to address this issue. The name of the patch is 253d93bbdf7ee9fe42bd8fdf15feea93ae59cbae. It is suggested to upgrade the affected component.
Timeline
- CVE published
- First seen by cve.now
Affected versions
- Sunwood-ai-labs github-kanban-mcp-server
0.1, 0.2, 0.3, 0.4.0