CVE-2025-53100
RestDB's Codehooks.io MCP Server Vulnerable to Command Injection
概要
RestDB's Codehooks.io MCP Server Vulnerable to Command Injection
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
RestDB's Codehooks.io MCP Server is an MCP server on the Codehooks.io platform. Prior to version 0.2.2, the MCP server is written in a way that is vulnerable to command injection attacks as part of some of its MCP Server tools definition and implementation. This could result in a user initiated remote command injection attack on a running MCP Server. This issue has been patched in version 0.2.2.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- patch github.com