Description
A vulnerability was identified in Sunwood-ai-labs github-kanban-mcp-server up to 0.4.0. Impacted is the function handleListIssues of the file src/handlers/issue-handlers.ts. Such manipulation of the argument state/labels leads to os command injection. The attack can be launched remotely. Upgrading to version 0.4.1 is recommended to address this issue. The name of the patch is 253d93bbdf7ee9fe42bd8fdf15feea93ae59cbae. It is suggested to upgrade the affected component.
Published: 2026-10-26
Score: 5.3 Medium
EPSS: n/a
KEV: No
Impact: os command injection
Action: Immediate Patch
AI Analysis

Impact

The flaw resides in the handleListIssues function of src/handlers/issue-handlers.ts. By manipulating the state or labels arguments, an attacker can inject arbitrary OS commands. The injection is executed on the server’s operating system, enabling remote code execution. This vulnerability can compromise confidentiality, integrity, and availability of the host system.

Affected Systems

Sunwood-ai-labs github-kanban-mcp-server versions up to 0.4.0 are affected. The product is a Kanban board management server hosted on GitHub. Upgrading to release 0.4.1, which contains commit 253d93bbdf7ee9fe42bd8fdf15feea93ae59cbae, resolves the issue.

Risk and Exploitability

The CVSS score of 5.3 indicates a medium severity. No EPSS data is available and the vulnerability is not listed in CISA KEV. The likely attack vector is a remote API call that supplies crafted state or label parameters. An attacker with network reach to the server can exploit the command injection to run arbitrary commands, provided the server user executing the service has sufficient permissions.

Generated by OpenCVE AI on October 26, 2026 at 17:24 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade Sunwood-ai-labs github-kanban-mcp-server to version 0.4.1 or later, applying commit 253d93bbdf7ee9fe42bd8fdf15feea93ae59cbae.
  • Restrict inbound API traffic to trusted IP ranges or behind a reverse proxy, and enforce strict input validation on state and label fields.
  • If an immediate upgrade is not possible, place the server behind firewall rules that block remote shell access and monitor for anomalous command execution patterns.

Generated by OpenCVE AI on October 26, 2026 at 17:24 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 26 Oct 2026 16:15:00 +0000

Type Values Removed Values Added
Description A vulnerability was identified in Sunwood-ai-labs github-kanban-mcp-server up to 0.4.0. Impacted is the function handleListIssues of the file src/handlers/issue-handlers.ts. Such manipulation of the argument state/labels leads to os command injection. The attack can be launched remotely. Upgrading to version 0.4.1 is recommended to address this issue. The name of the patch is 253d93bbdf7ee9fe42bd8fdf15feea93ae59cbae. It is suggested to upgrade the affected component.
Title Sunwood-ai-labs github-kanban-mcp-server issue-handlers.ts handleListIssues os command injection
First Time appeared Sunwood-ai-labs
Sunwood-ai-labs github-kanban-mcp-server
Weaknesses CWE-77
CWE-78
CPEs cpe:2.3:a:sunwood-ai-labs:github-kanban-mcp-server:*:*:*:*:*:*:*:*
Vendors & Products Sunwood-ai-labs
Sunwood-ai-labs github-kanban-mcp-server
References
Metrics cvssV2_0

{'score': 7.5, 'vector': 'AV:N/AC:L/Au:N/C:P/I:P/A:P/E:ND/RL:OF/RC:C'}

cvssV3_0

{'score': 6.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C'}

cvssV3_1

{'score': 6.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C'}

cvssV4_0

{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X'}

Subscriptions

Sunwood-ai-labs Github-kanban-mcp-server
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-10-26T16:00:14.112Z

Reserved: 2026-10-26T08:05:02.048Z

Link: CVE-2026-116369

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2026-10-26T16:17:18.360

Modified: 2026-10-26T18:41:21.450

Link: CVE-2026-116369

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-26T18:49:30Z

Weaknesses
  • CWE-77

    Improper Neutralization of Special Elements used in a Command ('Command Injection')

  • CWE-78

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')