CVE-2025-53818CWE-78

github-kanban-mcp-server Command Injection vulnerability

High · published July 14, 2025

CVSS v4.0
8.9
EPSS
1%
Percentile
71.9
In the wild
Unconfirmed
What it is

GitHub Kanban MCP Server is a Model Context Protocol (MCP) server for managing GitHub issues in Kanban board format and streamlining LLM task management. Version 0.3.0 of the MCP Server is written in a way that is vulnerable to command injection vulnerability attacks as part of some of its MCP Server tool definition and implementation. The MCP Server exposes the tool `add_comment` which relies on Node.js child process API `exec` to execute the GitHub (`gh`) command, is an unsafe and vulnerable API if concatenated with untrusted user input. As of time of publication, no known patches are available.

The record
Technical detail
CVSS v4.0
8.9 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
EPSS
0.01380 · 71.9th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2025-07-14T20:30Z
EPSS history
Timeline
  • 14 JUL 20:30Z
    github-kanban-mcp-server Command Injection vulnerability
    cvelistv5