CVE-2026-116369 | Sunwood-ai-labs github-kanban-mcp-server up to 0.4.0 issue-handlers.ts handleListIssues state/labels os command injection (Issue 26)

October 26, 2026 Yanac

A vulnerability was found in Sunwood-ai-labs github-kanban-mcp-server up to 0.4.0 and classified as critical. Impacted is the function handleListIssues of the file src/handlers/issue-handlers.ts. Such manipulation of the argument state/labels leads to os command injection.

This vulnerability is uniquely identified as CVE-2026-116369. The attack can be launched remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More