tocsin

CVE-2026-55580

2 advisories.

Go/github.com/sonirico/mcp-shell CVE-2026-55580: high, EPSS 0.20%

mcp-shell — Security Disabled by Default in Bare-Binary Deploy Path + Shell Interpreter in Secure-Mode Allowlist

Action: Upgrade github.com/sonirico/mcp-shell to 0.6.0 or later.

go get github.com/sonirico/mcp-shell@v0.6.0

Affected

introducedfixedlast affected
00.6.0-

Fixed versions

0.6.0

Sources

CVE-2026-55580 · published · modified · JSON

Go/github.com/sonirico/mcp-shell CVE-2026-55580: unknown, EPSS 0.20%

mcp-shell — Security Disabled by Default in Bare-Binary Deploy Path + Shell Interpreter in Secure-Mode Allowlist in github.com/sonirico/mcp-shell

Action: Upgrade github.com/sonirico/mcp-shell to 0.6.0 or later.

go get github.com/sonirico/mcp-shell@v0.6.0

Affected

introducedfixedlast affected
00.6.0-

Fixed versions

0.6.0

Sources

CVE-2026-55580 · published · modified · JSON