tufantunc CVE debriefs

CVE-2026-7039

A security vulnerability has been detected in tufantunc ssh-mcp up to 1.5.0. The affected element is the function shell.write of the file src/index.ts. Such manipulation of the argument Description leads to command injection. The attack must be carried out locally. Defenders responsible for systems or deployments using tufantunc ssh-mcp up to 1.5.0 should assess exposure and prioritize verification of inv [truncated]