Tag

Mcp-Server

1 brief RSS

ai-sdlc plugin MCP server: OS command injection (CVE-2026-117558)

The ai-sdlc plugin MCP server through 0.31.2 is vulnerable to OS command injection via the repo argument, allowing execution of commands by supplying shell metacharacters.

ai-sdlc plugin MCP server command-injection vulnerability mcp-server

1c 1h ago