Vulnerability Details CVE-2025-61489
A command injection vulnerability in the shell_exec function of sonirico mcp-shell v0.3.1 allows attackers to execute arbitrary commands via supplying a crafted command string.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.039
EPSS Ranking 88.0%
CVSS Severity
CVSS v3 Score 6.5