CVE-2025-61492
Published: 07 January 2026
Description
A command injection vulnerability in the execute_command function of terminal-controller-mcp 0.1.7 allows attackers to execute arbitrary commands via a crafted input.
Mitigating Controls (NIST 800-53 r5)AI
SI-10 mandates information input validation, directly preventing command injection by rejecting or sanitizing crafted inputs to the execute_command function.
SI-2 requires timely flaw remediation, addressing the specific command injection vulnerability in terminal-controller-mcp 0.1.7 through patching or upgrades.
AC-6 enforces least privilege, limiting the impact of arbitrary command execution by restricting privileges available to the exploited process.
Security SummaryAI
CVE-2025-61492 is a command injection vulnerability (CWE-77) in the execute_command function of terminal-controller-mcp version 0.1.7. Published on 2026-01-07, it allows attackers to execute arbitrary commands via a crafted input. The vulnerability affects this specific version of the terminal-controller-mcp software and carries a CVSS v3.1 base score of 10.0 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H), marking it as critical.
Remote attackers require no privileges or user interaction to exploit the vulnerability over the network with low attack complexity. Successful exploitation grants attackers the ability to execute arbitrary commands on the affected system, resulting in high impacts to confidentiality, integrity, and availability, along with a change in scope.
Mitigation details and further information are available in the project's GitHub repository at https://github.com/GongRzhe/terminal-controller-mcp, the related issue at https://github.com/GongRzhe/terminal-controller-mcp/issues/7, and https://github.com/cfdude/super-shell-mcp/issues/19.
Details
- CWE(s)
Affected Products
AI Security AnalysisAI
- AI Category
- AI Agent Protocols and Integrations
- Risk Domain
- Protocol-Specific Risks
- OWASP Top 10 for LLMs 2025
- None mapped
- MITRE ATLAS Techniques
- None mapped
- Classification Reason
- Matched keywords: mcp
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Remote unauthenticated command injection vulnerability in a network-accessible service directly enables T1190 (Exploit Public-Facing Application) for initial access and T1059 (Command and Scripting Interpreter) for arbitrary command execution.