CRITICAL
GongRzhe
CVE published 2026-01-07
CVE-2025-61492
A critical command injection vulnerability exists in terminal-controller-mcp version 0.1.7. This vulnerability allows attackers to execute arbitrary commands via crafted input to the execute_command function. The vulnerability has a CVSS score of 10 and is considered critical. Defenders should assess exposure and prioritize remediation to prevent potential command execution attacks. The vulnerability is c [truncated]