CVE-2026-19039
Received Received - Intake

Command Injection in Kino-Kafkaesque ssh-mcp-server

Publication date: 2026-08-06

Last updated on: 2026-08-06

Assigner: VulDB

Description
A vulnerability was detected in Kino-Kafkaesque ssh-mcp-server up to 8ebbbb99b26f80ff6162fe00957c6dec73fbc5a5. Impacted is the function ssh_exec of the file src/index.ts of the component SSH Command Handler. Performing a manipulation of the argument host/username results in command injection. The attack requires a local approach. The actual existence of this vulnerability is currently in question. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The project maintainer explains: "The intended threat model is that this MCP server is a local/trusted tool for an agent to execute commands over SSH, so callers already have meaningful execution capability through the exposed shell."

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-06
Last Modified
2026-08-06
Generated
2026-08-06
AI Q&A
2026-08-06
EPSS Evaluated
N/A
NVD
CVE-2026-19039
EUVD
EUVD-2026-53877

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
kino-the-kafkaesque ssh-mcp-server 1.0.0
kino-the-kafkaesque ssh-mcp-server to 8ebbbb99b26f80ff6162fe00957c6dec73fbc5a5 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-77 The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.
CWE-74 The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a local command injection flaw in the Kino-Kafkaesque ssh-mcp-server. The issue occurs in the ssh_exec function of src/index.ts, where untrusted host and username arguments are directly inserted into a shell command string without sanitization. This allows attackers to inject malicious shell commands that execute on the server before the intended SSH operation.

Detection Guidance

Check if the vulnerable ssh-mcp-server is installed by examining the src/index.ts file for the ssh_exec function. Look for child_process.exec() calls that interpolate host or username directly into shell commands. Verify if the project uses version 1.0.0 or earlier.

Impact Analysis

An attacker with local access could exploit this to run arbitrary commands on the server hosting the MCP server. This could lead to unauthorized system access, data theft, or further compromise of the server. The impact is limited to the local system since the attack requires local access.

Compliance Impact

This vulnerability could lead to unauthorized command execution, potentially violating data protection requirements under GDPR or HIPAA if sensitive data is accessed or modified. Compliance may be impacted if the server handles regulated data, as the flaw enables data breaches or unauthorized system changes.

Mitigation Strategies

Replace child_process.exec() with child_process.execFile() or child_process.spawn() in the ssh_exec, rsync_copy, and scp_copy handlers. Pass arguments separately to avoid shell command interpolation. Ensure untrusted inputs like host and username are sanitized before use.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-19039. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart