CVE-2025-9654
1 advisory.
npm/@aiondadotcom/mcp-ssh CVE-2025-9654: medium 6.3
AiondaDotCom mcp-ssh command injection vulnerability in SSH operations
Action: Upgrade @aiondadotcom/mcp-ssh to 1.1.0 or later.
npm i @aiondadotcom/mcp-ssh@1.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.1.0 | - |
Fixed versions
| 1.1.0 |
Sources
- osv: GHSA-694p-3fxc-m92h
- https://nvd.nist.gov/vuln/detail/CVE-2025-9654
- https://github.com/AiondaDotCom/mcp-ssh/commit/5b9b9c5b28d3f2672f356a790154ed68e17ef453
- https://github.com/AiondaDotCom/mcp-ssh/commit/cd2566a948b696501abfa6c6b03462cac5fb43d8
- https://github.com/AiondaDotCom/mcp-ssh
- https://vuldb.com/?ctiid.321862
- https://vuldb.com/?id.321862
- https://vuldb.com/?submit.637028
CVE-2025-9654 · published · modified · JSON