Ssh Mcp Server
Approved changes feed: RSS · Atom
cpe:2.3:a:kino-kafkaesque:ssh-mcp-server:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Kino Kafkaesque (9782ad72-2908-563c-b196-144933776868) |
|---|---|
| Product | Ssh Mcp Server (8ba4cf6d-fbb9-5a89-80e4-5af7d65f41c4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-19039 |
vulnerable | 2026-09-16 04:34:15.694317 |
Kino-Kafkaesque ssh-mcp-server SSH index.ts ssh_exec command injection
MEDIUM (5.3)
A vulnerability was detected in Kino-Kafkaesque ssh-mcp-server up to 8ebbbb99b26f80ff6162fe00957c6dec73fbc5a5. Impacted is the function ssh_exec of the file src/index.ts of the component SSH Command Handler. Performing a manipulation of the argument host/username results in command injection. The attack requires a local approach. The actual existence of this vulnerability is currently in question. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The project maintainer explains: "The intended threat model is that this MCP server is a local/trusted tool for an agent to execute commands over SSH, so callers already have meaningful execution capability through the exposed shell."
Published: 2026-08-06T13:00:10.636Z
Updated: 2026-08-06T13:59:05.205Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.