Executive brief
AiondaDotCom's mcp-ssh is a Node.js library that executes SSH commands and file transfer operations. A command injection vulnerability in versions up to 1.0.3 allows authenticated users to inject arbitrary shell commands through malicious input, potentially leading to remote code execution on the host system running the SSH client.
Technical details
The vulnerability is a command injection flaw (CWE-74) in the SSH operations module (server-simple.mjs) where unsafe exec() calls with string interpolation are used instead of proper argument separation. The vulnerable functions include runRemoteCommand(), uploadFile(), and downloadFile(), which concatenate user input into shell command strings. An authenticated user can exploit this via network by crafting malicious SSH parameters containing shell metacharacters to execute arbitrary commands. The fix (commit cd2566a948b696501abfa6c6b03462cac5fb43d8 and later) replaces exec() with execFile() using array arguments to prevent shell interpretation. Patches are available in versions 1.0.4 and 1.1.0.
Affected products
- AiondaDotCom mcp-ssh up to 1.0.3
Timeline
- 2025-08-29: disclosed: Published as GHSA-694p-3fxc-m92h
- 2025-08-29: patched: Fixed in versions 1.0.4 and 1.1.0