{"schema":"threatline.record/2","record":{"id":"CVE-2026-117569","aliases":[],"summary":"Kali-GPT through commit a608c74 OS Command Injection via MCP Scanner Tool Parameters","details":"Kali-GPT through commit a608c74 contains an OS command injection vulnerability in execute_tool() in kali_gpt/tools/mcp_server.py that allows MCP clients to run commands via unsanitized scanner parameters. Attackers or prompt-injected agents can embed shell metacharacters in parameters like target, ports, domain, wordlist, or url, executed via subprocess.run with shell=True as the MCP server user.","categories":["Unclassified"],"product":"kali-gpt","vendor":"alishahid74","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-117569","source_modified_at":"2026-10-27T13:08:01.873Z","fetched_at":"2026-10-27T16:27:21.584480Z","product":"kali-gpt","vendor":"alishahid74","versions":[{"status":"affected","version":"0","lessThanOrEqual":"a608c74e99910232dd208fee99de860458672b82","versionType":"git"}],"defaultStatus":"unaffected"}],"fixed_versions":[],"cvss":8.5,"severity":"High","kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-10-27T13:08:01.873Z","modified_at":"2026-10-27T13:08:01.873Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-117569","fetched_at":"2026-10-27T16:27:21.584480Z","source_modified_at":"2026-10-27T13:08:01.873Z"}],"sources":["CVE List"],"references":[{"source":"CVE List","url":"https://github.com/alishahid74/kali-gpt/issues/12","tags":["issue-tracking"]},{"source":"CVE List","url":"https://github.com/alishahid74/kali-gpt","tags":["product"]},{"source":"CVE List","url":"https://github.com/alishahid74/kali-gpt/blob/a608c74e99910232dd208fee99de860458672b82/kali_gpt/tools/mcp_server.py#L229-L356","tags":["technical-description"]},{"source":"CVE List","url":"https://www.vulncheck.com/advisories/kali-gpt-through-commit-a608c74-os-command-injection-via-mcp-scanner-tool-parameters","tags":["third-party-advisory"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-27T13:08:01.873Z","content_hash":"7afe314444ece2f8e58b8c5cc27a15f957130c22b6bd23ecf8d48c4f8171e7a9"}}