CVE-2025-66401

critical · 9.8

MCP Watch is a comprehensive security scanner for Model Context Protocol (MCP) servers. In 0.1.2 and earlier, the MCPScanner class contains a critical Command Injection vulnerability in the cloneRepo method. The application passes the user-supplied githubUrl argument directly to a system shell via execSync without sanitization. This allows an attacker to execute arbitrary commands on the host machine by appending shell metacharacters to the URL.

9.8

CVSS

2.2%

EPSS (exploit prob.)

82nd

EPSS percentile

2025-12-01

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-78

Affected products

Vendor	Product	Affected versions
kapilduraphe	mcp_watch	<= 0.1.2

Check a specific version with /api/v1/cve/match.

References

https://github.com/kapilduraphe/mcp-watch/commit/e7da78c5b4b960f8b66c254059ad9ebc544a91a6
https://github.com/kapilduraphe/mcp-watch/security/advisories/GHSA-27m7-ffhq-jqrm

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-66401