PT-2026-6322 · Godot Mcp · Godot-Mcp

Wcole3 · Published 2026-02-04 · Updated 2026-04-18 · CVE-2026-25546

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Godot MCP versions prior to 0.1.1

Description Godot MCP is a Model Context Protocol (MCP) server for interacting with the Godot game engine. A command injection issue in godot-mcp allows remote code execution. The executeOperation() function passes user-controlled input, such as projectPath, directly to exec(), which spawns a shell. An attacker could inject shell metacharacters like $(command) or &calc to execute arbitrary commands with the privileges of the MCP server process. This affects tools that accept projectPath, including create scene, add node, and load sprite.

Recommendations Update to Godot MCP version 0.1.1 or later.

Exploit

Fix

RCE

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2026-25546

GHSA-8JX2-RHFH-Q928

Affected Products

Godot-Mcp

References · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/25xxx/CVE-2026-25546.json · Exploit
• https://github.com/Coding-Solo/godot-mcp/security/advisories/GHSA-8jx2-rhfh-q928 · Vendor Advisory
• https://github.com/Coding-Solo/godot-mcp/pull/67 · Patch
• https://github.com/Coding-Solo/godot-mcp/commit/21c785d923cfdb471ea60323c13807d62dfecc5a · Patch
• https://osv.dev/vulnerability/GHSA-8jx2-rhfh-q928 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-25546 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-25546 · Security Note
• https://github.com/Coding-Solo/godot-mcp/issues/64 · Note
• https://github.com/Coding-Solo/godot-mcp · Note
• https://twitter.com/CVEnew/status/2019182744857899121 · Twitter Post
• https://twitter.com/ai_security_10x/status/2045350977700876702 · Twitter Post
• https://twitter.com/ai_security_10x/status/2045552147367149902 · Twitter Post