GitHub Advisoryadvisory · npm
GHSA-8jx2-rhfh-q928 godot-mcp has Command Injection via unsanitized projectPath
HIGH
Official page ↗
- Aliases
- CVE-2026-25546
- Ecosystem
- npm
- Packages
- @coding-solo/godot-mcp
- Severity
- High
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-78
- Reviewed
- 2026-02-04
Affected packages
• npm @coding-solo/godot-mcp: < 0.1.1 → fixed in 0.1.1
Description
Impact
A Command Injection vulnerability in godot-mcp allows remote code execution. The `executeOperation` function passed user-controlled input (e.g., `projectPath`) directly to `exec()`, which spawns a shell. An attacker could inject shell metacharacters like `$(command)` or `&calc` to execute arbitrary commands with the privileges of the MCP server process.
This affects any tool that accepts `projectPath`, including `create_scene`, `add_node`, `load_sprite`, and others.
Patches
Fixed in version 0.1.1 by switching from `exec()` to `execFile()`, which does not invoke a shell.
Workarounds
None. Users should upgrade immediately.
Resources
• https://github.com/Coding-Solo/godot-mcp/issues/64
• https://github.com/Coding-Solo/godot-mcp/pull/67
Related
Alias · CVE (1)
- CVE-2026-25546 Godot MCP is a Model Context Protocol (MCP) server for interacting with the Godot game engine. vulnerability
Weakness · CWE (1)
- CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness
References
- https://github.com/Coding-Solo/godot-mcp/security/advisories/GHSA-8jx2-rhfh-q928 web
- https://nvd.nist.gov/vuln/detail/CVE-2026-25546 advisory
- https://github.com/Coding-Solo/godot-mcp/issues/64 web
- https://github.com/Coding-Solo/godot-mcp/pull/67 web
- https://github.com/Coding-Solo/godot-mcp/commit/21c785d923cfdb471ea60323c13807d62dfecc5a web
- https://github.com/Coding-Solo/godot-mcp package