mbanyamer/cve-2026-25546-godot-mcp-0.1.1-os-command-injectionProof-of-concept exploit for CVE-2026-25546, demonstrating OS command injection in godot-mcp via malicious projectPath parameter, with Python PoC and lab setup instructions.
Author: Mohammed Idrees Banyamer
GitHub: mbanyamer
Date: February 04, 2026
godot-mcp < 0.1.1 - OS Command Injection via projectPath
CVE-2026-25546
CWE-78 (Improper Neutralization of Special Elements used in an OS Command - OS Command Injection)
< 0.1.1
0.1.1
High (CVSS v3.1 Base Score: 7.8 – AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
godot-mcp versions prior to 0.1.1 are vulnerable to OS Command Injection due to unsafe string interpolation of the projectPath parameter when passed to Node.js exec() / execAsync() calls inside the executeOperation() function.
An attacker who can supply a malicious projectPath value (via MCP tool calls, prompt injection, malicious Godot project references, etc.) can execute arbitrary operating system commands with the privileges of the MCP server process.
This repository contains a Python PoC that demonstrates the vulnerability by calling the create_scene tool over WebSocket with a malicious projectPath payload.
websockets library (pip install websockets)git clone https://github.com/Coding-Solo/godot-mcp.git
cd godot-mcp
git checkout <commit-or-tag-before-fix>
npm install