CVE-2025-61492
CVE-2025-61492
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A command injection vulnerability in the execute_command function of terminal-controller-mcp 0.1.7 allows attackers to execute arbitrary commands via a crafted input.
CVSS 10.0 · Critical · EPSS 2.1%
- Published
- Updated
Stack: python
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
terminal-controller PyPI
- Versions
- 0.1.0
- 0.1.1
- 0.1.2
- 0.1.3
- 0.1.5
- 0.1.6
- 0.1.7
- Affected ranges
- ECOSYSTEM: ≤ 0.1.7
No fix published