CVE-2025-54073
What it is
mcp-package-docs is an MCP (Model Context Protocol) server that provides LLMs with efficient access to package documentation across multiple programming languages and language server protocol (LSP) capabilities. A command injection vulnerability exists in the `mcp-package-docs` MCP Server prior to the fix in commit cb4ad49615275379fd6f2f1cf1ec4731eec56eb9. The vulnerability is caused by the unsanitized use of input parameters within a call to `child_process.exec`, enabling an attacker to inject arbitrary system commands. Successful exploitation can lead to remote code execution under the server process's privileges. The server constructs and executes shell commands using unvalidated user input directly within command-line strings. This introduces the possibility of shell metacharacter injection (`|`, `>`, `&&`, etc.). Commit cb4ad49615275379fd6f2f1cf1ec4731eec56eb9 in version 0.1.27 contains a fix for the issue, but upgrading to 0.1.28 is recommended.
At a glance
- Exploitability
- Can be exploited over the network without logging in, but needs a user to act. High risk of data exposure, data tampering, service disruption.
- Exploit odds
- 11.3% chance of exploitation in the next 30 days (EPSS). Higher than most.
- Fix
- A patch, advisory or fixed version is referenced. Upgrade or apply it.
Timeline
- PublishedDisclosed publicly on CVE.org and NVD
- Last updatedMost recent change to the record
Why it ranks here
- Exploited in the wild: no, CISA does not list it.
- Exploit odds: 11.3% in the next 30 days (EPSS).
- Severity: 7.5 HIGH (CVSS).
- Fix: a patch or advisory is linked.
Details
- Published
- Last modified
- Exploit probability
- 11.3% · EPSS, next 30 days
- Weakness
- CWE-77 · Command injection
- Record status
- Deferred
Attack profile CVSS 3.1 · 7.5
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- Required
- Scope
- Unchanged
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Raw vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Is it in your code?
Hand this to your coding agent. It searches your project for the affected products and checks versions. Nothing leaves your machine.
Read https://cve-list.com/agent/cve/CVE-2025-54073.md and follow it. Check whether this project is affected by CVE-2025-54073. Read only. Don't change anything and don't upload my code. Tell me yes, no or not sure, with the file as proof.
Fix and advisories
- https://github.com/advisories/GHSA-3q26-f695-pp76
- https://github.com/advisories/GHSA-5w57-2ccq-8w95
- https://github.com/advisories/GHSA-gjv4-ghm7-q58q
- https://github.com/sammcj/mcp-package-docs/commit/cb4ad49615275379fd6f2f1cf1ec4731eec56eb9
- https://github.com/sammcj/mcp-package-docs/releases/tag/v0.1.27
- https://github.com/sammcj/mcp-package-docs/releases/tag/v0.1.28
- https://github.com/sammcj/mcp-package-docs/security/advisories/GHSA-vf9j-h32g-2764
- https://github.com/advisories/GHSA-3q26-f695-pp76
- https://github.com/advisories/GHSA-5w57-2ccq-8w95
- https://github.com/advisories/GHSA-gjv4-ghm7-q58q
References
- https://equixly.com/blog/2025/03/29/mcp-server-new-security-nightmare
- https://github.com/advisories/GHSA-3q26-f695-pp76
- https://github.com/advisories/GHSA-5w57-2ccq-8w95
- https://github.com/advisories/GHSA-gjv4-ghm7-q58q
- https://github.com/sammcj/mcp-package-docs/commit/cb4ad49615275379fd6f2f1cf1ec4731eec56eb9
- https://github.com/sammcj/mcp-package-docs/releases/tag/v0.1.27
- https://github.com/sammcj/mcp-package-docs/releases/tag/v0.1.28
- https://github.com/sammcj/mcp-package-docs/security/advisories/GHSA-vf9j-h32g-2764
- https://invariantlabs.ai/blog/mcp-github-vulnerability
- https://github.com/advisories/GHSA-3q26-f695-pp76
- https://github.com/advisories/GHSA-5w57-2ccq-8w95
- https://github.com/advisories/GHSA-gjv4-ghm7-q58q
- https://github.com/sammcj/mcp-package-docs/security/advisories/GHSA-vf9j-h32g-2764