CVE-2025-69256

요약

The Serverless Framework is a framework for using AWS Lambda and other managed cloud services to build applications. Starting in version 4.29.0 and prior to version 4.29.3, a command injection vulnerability exists in the Serverless Framework's built-in MCP server package (`@serverless/mcp`). This vulnerability only affects users of the experimental MCP server feature (`serverless mcp`), which represents less than 0.1% of Serverless Framework users. The core Serverless Framework CLI and deployment functionality are not affected. The vulnerability is caused by the unsanitized use of input parameters within a call to `child_process.exec`, enabling an attacker to inject arbitrary system commands. Successful exploitation can lead to remote code execution under the server process's privileges. The server constructs and executes shell commands using unvalidated user input directly within command-line strings. This introduces the possibility of shell metacharacter injection (`|`, `>`, `&&`, etc.). Version 4.29.3 fixes the issue.

• CTT-Serverless-RCE-v1.0---Convergent-Time-Theory-Enhanced-MCP-Exploit익스플로잇

  Serverless Framework MCP 서버 (CVE-2025-69256) 기본 점수: 9.4/10 → CTT 강화 점수: 9.9/10 Serverless Framework의 MCP(Model Context Protocol) 서버에서 발견된 심각한 명령 주입 취약점으로, CTT 시간적 공명을 통해 전례 없는 공격 신뢰성과 회피 능력을 강화했습니다.