CVE-2026-116369

Sunwood-ai-labs github-kanban-mcp-server issue-handlers.ts handleListIssues os command injection

View on CVE.org
Published Oct 26, 2026 CVSS 4.0 · 5.3 Medium EPSS 1.4% KEV · Not listed
Description
A vulnerability was identified in Sunwood-ai-labs github-kanban-mcp-server up to 0.4.0. Impacted is the function handleListIssues of the file src/handlers/issue-handlers.ts. Such manipulation of the argument state/labels leads to os command injection. The attack can be launched remotely. Upgrading to version 0.4.1 is recommended to address this issue. The name of the patch is 253d93bbdf7ee9fe42bd8fdf15feea93ae59cbae. It is suggested to upgrade the affected component.

Analysis

AI-generated

Technical impact

The flaw resides in the handleListIssues function of src/handlers/issue-handlers.ts. By manipulating the state or labels arguments, an attacker can inject arbitrary OS commands. The injection is executed on the server’s operating system, and it is inferred that this may allow remote code execution. This vulnerability can compromise confidentiality, integrity, and availability of the host system. The weakness corresponds to CWE-77 and CWE-78.

Affected Systems

Sunwood-ai-labs github-kanban-mcp-server versions up to 0.4.0 are affected. The product is a Kanban board management server hosted on GitHub. Upgrading to release 0.4.1, which contains commit 253d93bbdf7ee9fe42bd8fdf15feea93ae59cbae, resolves the issue.

Risk and Exploitability

The CVSS score of 5.3 indicates a medium severity. The EPSS score of 0.0139 (approximately 1.4%) indicates a very low exploitation probability, and the vulnerability is not listed in CISA KEV. The likely attack vector is a remote API call that supplies crafted state or label parameters. An attacker with network reach to the server can exploit the command injection; it is inferred that this may allow remote code execution, depending on the privileges of the service process.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade Sunwood-ai-labs github-kanban-mcp-server to version 0.4.1 or later, applying commit 253d93bbdf7ee9fe42bd8fdf15feea93ae59cbae.
  • Restrict inbound API traffic to trusted IP ranges or behind a reverse proxy, and enforce strict input validation on state and label fields.
  • If an immediate upgrade is not possible, place the server behind firewall rules that block remote shell access and monitor for anomalous command execution patterns.

Generated by OpenCVE AI on October 27, 2026 at 15:28 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
Description A vulnerability was identified in Sunwood-ai-labs github-kanban-mcp-server up to 0.4.0. Impacted is the function handleListIssues of the file src/handlers/issue-handlers.ts. Such manipulation of the argument state/labels leads to os command injection. The attack can be launched remotely. Upgrading to version 0.4.1 is recommended to address this issue. The name of the patch is 253d93bbdf7ee9fe42bd8fdf15feea93ae59cbae. It is suggested to upgrade the affected component.
Title Sunwood-ai-labs github-kanban-mcp-server issue-handlers.ts handleListIssues os command injection
First Time appeared Sunwood-ai-labs
Sunwood-ai-labs github-kanban-mcp-server
Weaknesses CWE-77
CWE-78
CPEs cpe:2.3:a:sunwood-ai-labs:github-kanban-mcp-server:*:*:*:*:*:*:*:*
Vendors & Products Sunwood-ai-labs
Sunwood-ai-labs github-kanban-mcp-server
References
Metrics cvssV2_0

{'score': 7.5, 'vector': 'AV:N/AC:L/Au:N/C:P/I:P/A:P/E:ND/RL:OF/RC:C'}

cvssV3_0

{'score': 6.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C'}

cvssV3_1

{'score': 6.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C'}

cvssV4_0

{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X'}
Weaknesses
  • CWE-77

    Improper Neutralization of Special Elements used in a Command ('Command Injection')

  • CWE-78

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Sources

Status
PUBLISHED
Assigner
VulDB
Published
Updated
Oct 31, 2026, 1:30 AM
Reserved
Oct 26, 2026, 8:05 AM

View source JSON

Updated
Oct 31, 2026, 1:30 AM

JSON

Status
Deferred
Published
Oct 26, 2026, 4:17 PM
Modified
Oct 31, 2026, 2:17 AM

View source JSON

No data.

Updated
Oct 27, 2026, 3:30 PM

JSON