CVE-2026-102906
Received Received - Intake

Command Injection in Git Remove MCP Tool

Publication date: 2026-09-30

Last updated on: 2026-09-30

Assigner: VulDB

Description
A vulnerability was identified in 0xshariq github-mcp-server up to 52e764a7d66eac1726fce02ca7bb5a638571801a. This issue affects the function child_process.exec of the file src/github.ts of the component Git Remove MCP Tool. Such manipulation of the argument File leads to os command injection. The attack can be executed remotely. The exploit is publicly available and might be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The project was informed of the problem early through an issue report but has not responded yet.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-30
Last Modified
2026-09-30
Generated
2026-09-30
AI Q&A
2026-09-30
EPSS Evaluated
N/A
NVD
CVE-2026-102906
EUVD
EUVD-2026-89579

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
0xshariq github_mcp_server to 52e764a7d66eac1726fce02ca7bb5a638571801a (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-78 The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.
CWE-77 The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is an OS command injection vulnerability in the github-mcp-server project. It affects the git_remove MCP tool and allows attackers to execute arbitrary operating system commands by manipulating the File argument passed to child_process.exec in src/github.ts. The vulnerability occurs because user-controlled input is embedded directly into shell commands without proper sanitization.

Detection Guidance

To detect this vulnerability, inspect the github-mcp-server logs for unusual commands or outputs. Check for any execution of arbitrary commands like 'id' or unexpected system calls. Review the server's network traffic for suspicious MCP interface interactions.

Impact Analysis

An attacker could execute unauthorized commands on the server running the github-mcp-server with the privileges of that process. This could lead to data theft, system modification, service disruption, or further network compromise. The exploit is publicly available and can be triggered remotely through the MCP interface.

Compliance Impact

This vulnerability could lead to unauthorized data access or modification, violating confidentiality requirements in GDPR and HIPAA. It may result in data breaches that require breach notifications under these regulations. The lack of input validation and authorization controls also fails to meet security best practices required by compliance standards.

Mitigation Strategies

Immediately restrict access to the MCP interface to trusted users only. Disable the git_remove tool if possible. Replace unsafe child_process.exec calls with safer alternatives like child_process.execFile or spawn with shell disabled. Validate all file paths to prevent path traversal.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-102906. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart