PT-2026-33073 · Upsonic · Upsonic

Published 2026-04-15 · Updated 2026-04-29 · CVE-2026-30625

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Upsonic version 0.71.6

Description An issue exists in the MCP server/task creation functionality where users can define MCP tasks with arbitrary command and args values. While an allowlist is implemented, specific permitted commands such as npm and npx accept argument flags that allow the execution of arbitrary OS commands. This can lead to remote code execution with the privileges of the Upsonic process.

Recommendations Update to version 0.72.0. Restrict network access to mitigate risk.

Fix

RCE

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2026-30625

GHSA-CW73-5F7H-M4GV

Affected Products

Upsonic

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2026-30625 · Security Note
• https://osv.dev/vulnerability/GHSA-cw73-5f7h-m4gv · Vendor Advisory
• https://github.com/Upsonic/Upsonic · Note
• https://github.com/Upsonic/Upsonic/commit/855053fce0662227d9246268ff4a0844b481a305 · Note
• https://twitter.com/infoflowcloud/status/2044739696635342865 · Twitter Post
• https://ox.security/blog/mcp-supply-chain-advisory-rce-vulnerabilities-across-the-ai-ecosystem · Note
• https://twitter.com/OX__Security/status/2049472132661297210 · Twitter Post
• https://twitter.com/CVEnew/status/2044738017751863301 · Twitter Post
• https://twitter.com/MosheTov/status/2048849140017447248 · Twitter Post
• https://twitter.com/pulsepatchio/status/2045336150785626199 · Twitter Post
• https://reddit.com/r/SecOpsDaily/comments/1sxf1cs/flowise_cve202640933_upsonic_cve202630625_what_to · Reddit Post