PT-2025-35862 · Unknown · Markdownify

0Xroyr · Published 2025-09-02 · Updated 2025-09-07 · CVE-2025-58358

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Markdownify versions prior to 0.0.2

Description Markdownify is a Model Context Protocol server for converting content to Markdown. Versions prior to 0.0.2 contain a command injection issue, caused by the unsanitized use of input parameters within a call to child process.exec. Successful exploitation can lead to remote code execution under the server process's privileges. The server constructs and executes shell commands using unvalidated user input directly within command-line strings, introducing the possibility of shell metacharacter injection.

Recommendations Update to version 0.0.2 or later.

Exploit

Fix

RCE

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2025-58358

GHSA-45QJ-4XQ3-3C45

Affected Products

Markdownify

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/58xxx/CVE-2025-58358.json · Exploit
• https://osv.dev/vulnerability/CVE-2025-58358 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-45qj-4xq3-3c45 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-58358 · Security Note
• https://github.com/zcaceres/markdownify-mcp/commit/a31204de058b22a47e1dcc24508993cfe97e5bb3 · Note
• https://github.com/zcaceres/markdownify-mcp/security/advisories/GHSA-45qj-4xq3-3c45 · Note
• https://github.com/zcaceres/markdownify-mcp · Note
• https://twitter.com/0xRoyR/status/1964632698825097696 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1963646021281489385 · Twitter Post