tocsin

CVE-2026-55582

2 advisories.

Go/github.com/sonirico/mcp-shell CVE-2026-55582: high 8.4, EPSS 0.27%

mcp-shell has a Secure Mode Allowlist Bypass via Git Shell Alias

Action: Upgrade github.com/sonirico/mcp-shell to 0.6.0 or later.

go get github.com/sonirico/mcp-shell@v0.6.0

Affected

introducedfixedlast affected
00.6.0-

Fixed versions

0.6.0

Sources

CVE-2026-55582 · published · modified · JSON

Go/github.com/sonirico/mcp-shell CVE-2026-55582: unknown, EPSS 0.27%

mcp-shell has a Secure Mode Allowlist Bypass via Git Shell Alias in github.com/sonirico/mcp-shell

Action: Upgrade github.com/sonirico/mcp-shell to 0.6.0 or later.

go get github.com/sonirico/mcp-shell@v0.6.0

Affected

introducedfixedlast affected
00.6.0-

Fixed versions

0.6.0

Sources

CVE-2026-55582 · published · modified · JSON