Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-4cm1-wu3g-1qgm
Vulnerability ID VCID-4cm1-wu3g-1qgm
Aliases CVE-2026-30625
GHSA-cw73-5f7h-m4gv
Summary Upsonic 0.71.6 contains a remote code execution vulnerability in its MCP server/task creation functionality. The application allows users to define MCP tasks with arbitrary command and args values. Although an allowlist exists, certain allowed commands (npm, npx) accept argument flags that enable execution of arbitrary OS commands. Maliciously crafted MCP tasks may lead to remote code execution with the privileges of the Upsonic process. In version 0.72.0 Upsonic added a warning about using Stdio servers being able to execute commands directly on the machine.
Status Published
Exploitability 0.5
Weighted Severity 9.0
Risk 4.5
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00343 https://api.first.org/data/v1/epss?cve=CVE-2026-30625
epss 0.00343 https://api.first.org/data/v1/epss?cve=CVE-2026-30625
epss 0.00343 https://api.first.org/data/v1/epss?cve=CVE-2026-30625
cvssv3.1_qr CRITICAL https://github.com/advisories/GHSA-cw73-5f7h-m4gv
cvssv3.1 9.8 https://github.com/Upsonic/Upsonic
generic_textual CRITICAL https://github.com/Upsonic/Upsonic
cvssv3.1 9.8 https://github.com/Upsonic/Upsonic/commit/855053fce0662227d9246268ff4a0844b481a305
generic_textual CRITICAL https://github.com/Upsonic/Upsonic/commit/855053fce0662227d9246268ff4a0844b481a305
ssvc Track https://github.com/Upsonic/Upsonic/commit/855053fce0662227d9246268ff4a0844b481a305
cvssv3.1 9.8 https://nvd.nist.gov/vuln/detail/CVE-2026-30625
generic_textual CRITICAL https://nvd.nist.gov/vuln/detail/CVE-2026-30625
cvssv3.1 9.8 https://www.ox.security/blog/mcp-supply-chain-advisory-rce-vulnerabilities-across-the-ai-ecosystem
generic_textual CRITICAL https://www.ox.security/blog/mcp-supply-chain-advisory-rce-vulnerabilities-across-the-ai-ecosystem
cvssv3.1 9.8 https://www.ox.security/blog/mcp-supply-chain-advisory-rce-vulnerabilities-across-the-ai-ecosystem/
ssvc Track https://www.ox.security/blog/mcp-supply-chain-advisory-rce-vulnerabilities-across-the-ai-ecosystem/
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2026-30625
https://github.com/Upsonic/Upsonic
https://nvd.nist.gov/vuln/detail/CVE-2026-30625
855053fce0662227d9246268ff4a0844b481a305 https://github.com/Upsonic/Upsonic/commit/855053fce0662227d9246268ff4a0844b481a305
GHSA-cw73-5f7h-m4gv https://github.com/advisories/GHSA-cw73-5f7h-m4gv
mcp-supply-chain-advisory-rce-vulnerabilities-across-the-ai-ecosystem https://www.ox.security/blog/mcp-supply-chain-advisory-rce-vulnerabilities-across-the-ai-ecosystem/
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/Upsonic/Upsonic
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/Upsonic/Upsonic/commit/855053fce0662227d9246268ff4a0844b481a305
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-16T13:53:33Z/ Found at https://github.com/Upsonic/Upsonic/commit/855053fce0662227d9246268ff4a0844b481a305
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2026-30625
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://www.ox.security/blog/mcp-supply-chain-advisory-rce-vulnerabilities-across-the-ai-ecosystem
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://www.ox.security/blog/mcp-supply-chain-advisory-rce-vulnerabilities-across-the-ai-ecosystem/
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-16T13:53:33Z/ Found at https://www.ox.security/blog/mcp-supply-chain-advisory-rce-vulnerabilities-across-the-ai-ecosystem/
Exploit Prediction Scoring System (EPSS)
Percentile 0.57268
EPSS Score 0.00343
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-11T16:41:53.042884+00:00 Vulnrichment Import https://github.com/cisagov/vulnrichment/blob/develop/2026/30xxx/CVE-2026-30625.json 38.6.0