CVE-2026-108953 | cfdude mac-shell-mcp up to 1.x execute_command arguments os command injection

October 12, 2026 Yanac

A vulnerability was found in cfdude mac-shell-mcp up to 1.x and classified as problematic. The impacted element is the function execute_command. Executing a manipulation of the argument arguments can lead to os command injection.

This vulnerability is handled as CVE-2026-108953. The attack can be executed remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More