CVE-2026-0757
Command Injection in MCP Manager Enables Sandbox Escape
Publication date: 2026-01-23
Last updated on: 2026-01-23
Assigner: Zero Day Initiative
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| unknown_vendor | mcp_manager_for_claude_desktop | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-78 | The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2026-0757 is a critical vulnerability in MCP Manager for Claude Desktop that allows remote attackers to perform command injection and escape the sandbox environment. The flaw exists because the software does not properly validate user-supplied strings when processing MCP config objects before using them in system calls. This means an attacker can execute arbitrary code with medium integrity privileges by tricking a user into visiting a malicious webpage or opening a malicious file. [1]
How can this vulnerability impact me? :
This vulnerability can impact you by allowing remote attackers to bypass the sandbox protections of MCP Manager for Claude Desktop and execute arbitrary code on your system with medium integrity privileges. This could lead to unauthorized actions, data compromise, or further system exploitation if a user interacts with malicious content such as a webpage or file. [1]
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, avoid visiting untrusted webpages or opening suspicious files that could exploit the command injection flaw. Ensure that MCP Manager for Claude Desktop is updated with any patches provided by the vendor addressing this issue. Additionally, consider restricting network access to MCP Manager for Claude Desktop and monitoring for unusual process executions that may indicate sandbox escape attempts. [1]