Critical · published December 2, 2025
🚨 A critical command injection vulnerability in MCP Watch lets attackers run arbitrary commands on your server with just a sneaky URL! 🔥 Think of it like a restaurant that blindly accepts any food order without verifying the ingredients; if a customer slips in something dangerous, the kitchen could end up serving a hazardous dish. In this case, the command being executed is like an unsuspecting chef cooking up chaos in your system! An attacker exploiting this vulnerability could potentially take full control of your host machine, executing any command they desire. Imagine them snooping around, stealing sensitive data, or even outright destroying your system — it's absolutely devastating! This is a scenario no one wants to face, especially given the potential exposure of sensitive information.
Think of it like a restaurant that blindly accepts any food order without verifying the ingredients; if a customer slips in something dangerous, the kitchen could end up serving a hazardous dish. In this case, the command being executed is like an unsuspecting chef cooking up chaos in your system! The flaw lies in the MCPScanner class, where the cloneRepo method directly passes a user-supplied 'githubUrl' argument to a system shell using execSync without any sanitization. This allows attackers to craft a malicious URL, appending shell metacharacters to execute arbitrary commands on the host system.
An attacker exploiting this vulnerability could potentially take full control of your host machine, executing any command they desire. Imagine them snooping around, stealing sensitive data, or even outright destroying your system — it's absolutely devastating! This is a scenario no one wants to face, especially given the potential exposure of sensitive information. To protect your environment, update MCP Watch to version 0.1.3 or later immediately. Additionally, sanitize all inputs to the execSync function or implement strict validation on the provided URL to prevent injection attacks. Don't delay—this is crucial! You've got this! A quick update will secure your servers and keep your environment safe and sound! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| kapilduraphe/mcp_watch | ≤ 0.1.2 | — |