Critical, CVSS 9.3npmAmendedPublished
@akoskm/create-mcp-server-stdio is vulnerable to MCP Server Command Injection through exec API
CVE-2025-54994 · GHSA-3ch2-jxxc-v4xf
- Affected
- npm @akoskm/create-mcp-server-stdio < 0.0.13
- Fixed in
- 0.0.13· Vendor fix available
- Issue
- Command Injection in MCP Server The MCP Server at https://github.com/akoskm/create-mcp-server-stdio is written in a way that is vulnerable to command injection vulnerability attacks as part of some of its MCP Server tool definition and implementation. Vulnerable tool The MCP Server exposes the tool which-app-on-port which relies on Node.js child process API exec which is an unsafe and vulnerable API if concatenated with untrusted user input. Vulnerable line of code: https://github.com/akoskm/create-mcp-server-stdio/blob/main/src/index.ts#L24-L40 Exploitation When LLMs are tricked through prompt injection (and other techniques and attack vectors) to call the tool with input that uses special shell characters such as ; rm -rf /tmp; (be careful actually executing this payload) and other payload variations, the full command-line text will be interepted by the shell and result in other commands except of ps executing on the host running the MCP Server. Reference example from prior…
Recommended action: Upgrade to 0.0.13 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.