---
id: CVE-2026-6942
title: radare2-mcp <=1.6.0 OS Command Injection via Shell Metacharacter Bypass
summary: >-
  radare2-mcp version 1.6.0 and earlier contains an os command injection
  vulnerability that allows remote attackers to execute arbitrary commands by
  bypassing the command filter through shell metacharacters in user-controlled
  input passed …
severity: critical
cvss: 9.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
cwe:
  - CWE-78
vendor: radareorg
product: radare2-mcp
affected:
  - radare2-mcp <= 1.6.0
ssvc:
  exploitation: poc
  automatable: 'yes'
  technicalImpact: total
  timestamp: '2026-04-24T11:06:58.764810Z'
exploitAvailable: true
published: '2026-04-23'
updated: '2026-10-29'
sourceUpdated: '2026-10-29T21:16:32.153Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-6942'
references:
  - url: 'https://github.com/radareorg/radare2-mcp/issues/45'
    label: Pull Request
  - url: >-
      https://github.com/radareorg/radare2-mcp/commit/482cde6500009112a8bc0b3fa8d2ef6180581ec0
    label: Patch Commit
  - url: >-
      https://www.vulncheck.com/advisories/radare2-mcp-os-command-injection-via-shell-metacharacter-bypass
tags:
  - cve.org
  - exploit-available
epss: 0.0192
epssPercentile: 0.80029
ingestedAt: '2026-11-03T08:39:35.586Z'
---

## Overview

radare2-mcp version 1.6.0 and earlier contains an os command injection vulnerability that allows remote attackers to execute arbitrary commands by bypassing the command filter through shell metacharacters in user-controlled input passed to r2_cmd_str(). Attackers can inject shell metacharacters through the jsonrpc interface parameters to achieve remote code execution on the host running radare2-mcp without requiring authentication.

## Affected

- `radare2-mcp <= 1.6.0`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.