GHSA-8jx2-rhfh-q928

Suggest an improvement
Source
https://github.com/advisories/GHSA-8jx2-rhfh-q928
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/02/GHSA-8jx2-rhfh-q928/GHSA-8jx2-rhfh-q928.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-8jx2-rhfh-q928
Aliases
Published
2026-02-04T20:02:32Z
Modified
2026-02-05T00:37:12Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
godot-mcp has Command Injection via unsanitized projectPath
Details

Impact

A Command Injection vulnerability in godot-mcp allows remote code execution. The executeOperation function passed user-controlled input (e.g., projectPath) directly to exec(), which spawns a shell. An attacker could inject shell metacharacters like $(command) or &calc to execute arbitrary commands with the privileges of the MCP server process.

This affects any tool that accepts projectPath, including create_scene, add_node, load_sprite, and others.

Patches

Fixed in version 0.1.1 by switching from exec() to execFile(), which does not invoke a shell.

Workarounds

None. Users should upgrade immediately.

Resources

  • https://github.com/Coding-Solo/godot-mcp/issues/64
  • https://github.com/Coding-Solo/godot-mcp/pull/67
Database specific 
{
    "nvd_published_at": "2026-02-04T22:16:00Z",
    "cwe_ids": [
        "CWE-78"
    ],
    "github_reviewed_at": "2026-02-04T20:02:32Z",
    "severity": "HIGH",
    "github_reviewed": true
}
References

Affected packages

npm / @coding-solo/godot-mcp

Package

Name
@coding-solo/godot-mcp
View open source insights on deps.dev
Purl
pkg:npm/%40coding-solo/godot-mcp

Affected ranges

Type
SEMVER
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.1.1

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/02/GHSA-8jx2-rhfh-q928/GHSA-8jx2-rhfh-q928.json"