---
id: CVE-2026-117569
title: >-
  Kali-GPT through commit a608c74 OS Command Injection via MCP Scanner Tool
  Parameters
summary: >-
  Kali-GPT through commit a608c74 contains an OS command injection vulnerability
  in execute_tool() in kali_gpt/tools/mcp_server.py that allows MCP clients to
  run commands via unsanitized scanner parameters. Attackers or prompt-injected
  age…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
cwe:
  - CWE-78
vendor: alishahid74
product: kali-gpt
affected:
  - kali-gpt <= a608c74e99910232dd208fee99de860458672b82
published: '2026-10-27'
updated: '2026-10-27'
sourceUpdated: '2026-10-27T13:08:01.873Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-117569'
references:
  - url: 'https://github.com/alishahid74/kali-gpt/issues/12'
    label: 'GitHub Issue #12'
  - url: 'https://github.com/alishahid74/kali-gpt'
  - url: >-
      https://github.com/alishahid74/kali-gpt/blob/a608c74e99910232dd208fee99de860458672b82/kali_gpt/tools/mcp_server.py#L229-L356
  - url: >-
      https://www.vulncheck.com/advisories/kali-gpt-through-commit-a608c74-os-command-injection-via-mcp-scanner-tool-parameters
    label: >-
      VulnCheck Advisory: Kali-GPT through commit a608c74 OS Command Injection
      via MCP Scanner Tool Parameters
tags:
  - cve.org
ingestedAt: '2026-10-27T16:11:59.340Z'
---

## Overview

Kali-GPT through commit a608c74 contains an OS command injection vulnerability in execute_tool() in kali_gpt/tools/mcp_server.py that allows MCP clients to run commands via unsanitized scanner parameters. Attackers or prompt-injected agents can embed shell metacharacters in parameters like target, ports, domain, wordlist, or url, executed via subprocess.run with shell=True as the MCP server user.

## Affected

- `kali-gpt <= a608c74e99910232dd208fee99de860458672b82`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.