{"id":"EUVD-2025-200116","enisaUuid":"daa7f3de-d559-3804-8585-f4e374ffcc55","description":"MCP Watch is a comprehensive security scanner for Model Context Protocol (MCP) servers. In 0.1.2 and earlier, the MCPScanner class contains a critical Command Injection vulnerability in the cloneRepo method. The application passes the user-supplied githubUrl argument directly to a system shell via execSync without sanitization. This allows an attacker to execute arbitrary commands on the host machine by appending shell metacharacters to the URL.","datePublished":"Dec 1, 2025, 10:43:26 PM","dateUpdated":"Dec 2, 2025, 2:14:16 PM","baseScore":9.8,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":"https://github.com/kapilduraphe/mcp-watch/security/advisories/GHSA-27m7-ffhq-jqrm\nhttps://github.com/kapilduraphe/mcp-watch/commit/e7da78c5b4b960f8b66c254059ad9ebc544a91a6\n","aliases":"CVE-2025-66401\nGHSA-27m7-ffhq-jqrm\n","assigner":"GitHub_M","epss":2.21,"enisaIdProduct":[{"id":"6fe737bb-c818-375e-b2f8-da1c662f9bde","product":{"name":"mcp-watch","vendor":{"name":"kapilduraphe"}},"product_version":"≤ 0.1.2"}],"enisaIdVendor":[{"id":"aa73ad63-66bd-37c8-9dc7-71833c4a9e4a","vendor":{"name":"kapilduraphe"}}],"enisaIdVulnerability":[{"id":"247389ee-01ba-3050-b3f4-3d729d503c8b","vulnerability":{"id":"GHSA-27m7-ffhq-jqrm","description":"MCP Watch has a Critical Command Injection in cloneRepo allows Remote Code Execution (RCE) via malicious URL","datePublished":"Dec 2, 2025, 12:38:14 AM","dateUpdated":"Dec 2, 2025, 12:38:14 AM","baseScore":0.0,"references":"https://github.com/kapilduraphe/mcp-watch/security/advisories/GHSA-27m7-ffhq-jqrm\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-66401\nhttps://github.com/kapilduraphe/mcp-watch/commit/e7da78c5b4b960f8b66c254059ad9ebc544a91a6\nhttps://github.com/kapilduraphe/mcp-watch\n","enisa_id":"EUVD-2025-200116\n","aliases":"CVE-2025-66401\nGHSA-27m7-ffhq-jqrm\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 1:56:19 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"7c1e919b-0442-3527-9511-a58446cbcf58","vulnerability":{"id":"CVE-2025-66401","description":"MCP Watch is a comprehensive security scanner for Model Context Protocol (MCP) servers. In 0.1.2 and earlier, the MCPScanner class contains a critical Command Injection vulnerability in the cloneRepo method. The application passes the user-supplied githubUrl argument directly to a system shell via execSync without sanitization. This allows an attacker to execute arbitrary commands on the host machine by appending shell metacharacters to the URL.","datePublished":"Dec 1, 2025, 10:43:26 PM","dateUpdated":"Dec 2, 2025, 2:14:16 PM","status":"PUBLISHED","baseScore":9.8,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":"https://github.com/kapilduraphe/mcp-watch/security/advisories/GHSA-27m7-ffhq-jqrm\nhttps://github.com/kapilduraphe/mcp-watch/commit/e7da78c5b4b960f8b66c254059ad9ebc544a91a6\n","enisa_id":"EUVD-2025-200116\n","assigner":"GitHub_M","epss":2.21,"dataProcessed":"Nov 6, 2026, 7:21:48 AM","vulnerabilityProduct":[{"id":"f8cd877c-bdff-349b-ba8b-1baa628f0b91","product":{"name":"mcp-watch","vendor":{"name":"kapilduraphe"}},"product_version":"≤ 0.1.2"}],"vulnerabilityVendor":[{"id":"b900c399-bda2-3972-9447-3b5a293d9523","vendor":{"name":"kapilduraphe"}}]}}],"enisaIdAdvisory":[]}