Headline
GHSA-h4rf-624j-gj33: terminal-controller-mcp vulnerable to Command Injection
A command injection vulnerability in the execute_command function of terminal-controller-mcp 0.1.7 allows attackers to execute arbitrary commands via a crafted input.
Skip to content
Navigation Menu
AI CODE CREATION
GitHub CopilotWrite better code with AI
GitHub SparkBuild and deploy intelligent apps
GitHub ModelsManage and compare prompts
MCP RegistryNewIntegrate external tools
View all features
- Pricing
Provide feedback
Saved searches****Use saved searches to filter your results more quickly
Sign up
Appearance settings
- GitHub Advisory Database
- GitHub Reviewed
- CVE-2025-61492
terminal-controller-mcp vulnerable to Command Injection
Critical severity GitHub Reviewed Published Jan 7, 2026 to the GitHub Advisory Database • Updated Jan 8, 2026
Package
pip terminal-controller (pip)
Affected versions
<= 0.1.7
Description
Published to the GitHub Advisory Database
Jan 7, 2026
EPSS score