7.8Hoch
esp-mcp through commit 28afddf OS Command Injection via MCP Tool Parameters
horw esp-mcp
esp-mcp through commit 28afddf contains an OS command injection vulnerability that allows attackers to run arbitrary commands by supplying shell metacharacters in MCP tool parameters. Attackers influencing agent tool calls through prompt injection can inject …