CVE-2026-25546
Command Injection in Godot MCP Allows Remote Code Execution
Publication date: 2026-02-04
Last updated on: 2026-03-18
Assigner: GitHub, Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| coding-solo | godot_mcp | to 0.1.1 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-78 | The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
The vulnerability in Godot MCP, a Model Context Protocol server for the Godot game engine, is a command injection flaw present before version 0.1.1. Specifically, the executeOperation function improperly passes user-controlled input, such as projectPath, directly to the exec() function which spawns a shell. This allows an attacker to inject shell metacharacters (e.g., $(command) or &calc) to execute arbitrary commands with the privileges of the MCP server process.
This affects any tool that accepts projectPath input, including create_scene, add_node, load_sprite, and others. The issue was fixed in version 0.1.1.
How can this vulnerability impact me? :
This vulnerability can allow an attacker to remotely execute arbitrary commands on the system running the Godot MCP server with the same privileges as the MCP server process. This could lead to unauthorized access, data manipulation, system compromise, or disruption of services.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
I don't know
How can this vulnerability be detected on my network or system? Can you suggest some commands?
I don't know
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, upgrade the Godot MCP server to version 0.1.1 or later, where the command injection issue has been patched.
Avoid using versions prior to 0.1.1, as they allow remote code execution via user-controlled input passed directly to exec().