Is CVE-2026-108953 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-108953?

CVE-2026-108953 has a CVSS v3 severity of HIGH (7.8).

Back

CVE-2026-108953

Description

mac-shell-mcp before 2.0.0 contains an OS command injection vulnerability that allows MCP clients to bypass the command whitelist by injecting shell metacharacters into execute_command arguments. Attackers or malicious prompts can call a safe command such as pwd with arguments like ';' to run forbidden commands as the server user without approval.