PT-2025-48575 · Mcp Watch · Mcp-Watch

Published 2025-12-01 · Updated 2026-02-06 · CVE-2025-66401

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions MCP Watch versions 0.1.2 and earlier

Description MCP Watch, a security scanner for Model Context Protocol (MCP) servers, contains a Command Injection issue in the cloneRepo method of the MCPScanner class. The application directly passes the githubUrl argument, supplied by a user, to a system shell using execSync without proper sanitization. This allows an attacker to execute arbitrary commands on the host machine by appending shell metacharacters to the URL.

Recommendations Versions prior to 0.1.2 are vulnerable.

Exploit

Fix

RCE

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2025-66401

GHSA-27M7-FFHQ-JQRM

Affected Products

Mcp-Watch

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/66xxx/CVE-2025-66401.json · Exploit
• https://github.com/kapilduraphe/mcp-watch/security/advisories/GHSA-27m7-ffhq-jqrm · Vendor Advisory
• https://github.com/kapilduraphe/mcp-watch/commit/e7da78c5b4b960f8b66c254059ad9ebc544a91a6 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-66401 · Security Note
• https://osv.dev/vulnerability/CVE-2025-66401 · Vendor Advisory
• https://t.me/cveNotify/151153 · Telegram Post
• https://twitter.com/CVEnew/status/1995626924933067048 · Twitter Post
• https://twitter.com/offseq/status/1995644665115103317 · Twitter Post
• https://t.me/cveNotify/144475 · Telegram Post
• https://twitter.com/0x13370x/status/1995724720180801997 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1995648025578865057 · Twitter Post
• https://twitter.com/0dayPublishing/status/1995627768524976355 · Twitter Post
• https://t.me/CVEtracker/38606 · Telegram Post