CVE-2025-53818

🗓️ 14 Jul 2025 20:30:29Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 26 Views

GitHub Kanban MCP Server versions 0.3.0 and 0.4.0 have a command injection vulnerability.

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2025-53818	12 Jul 202510:41	–	circl
CNNVD	GitHub Kanban MCP Server 操作系统命令注入漏洞	14 Jul 202500:00	–	cnnvd
Cvelist	CVE-2025-53818 github-kanban-mcp-server Command Injection vulnerability	14 Jul 202520:30	–	cvelist
EUVD	EUVD-2025-21393	3 Oct 202520:07	–	euvd
Github Security Blog	GitHub Kanban MCP Server vulnerable to Command Injection	15 Jul 202517:06	–	github
NVD	CVE-2025-53818	14 Jul 202521:15	–	nvd
OSV	CVE-2025-53818 github-kanban-mcp-server Command Injection vulnerability	14 Jul 202520:30	–	osv
OSV	GHSA-6JX8-RCJX-VMWF GitHub Kanban MCP Server vulnerable to Command Injection	15 Jul 202517:06	–	osv
Positive Technologies	PT-2025-29513 · Unknown · Github-Kanban-Mcp-Server	14 Jul 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-53818	16 Jul 202520:58	–	redhatcve

Vulners

Node

sunwood-ai-labs github-kanban-mcp-serverMatch0.3.0

[
  {
    "vendor": "Sunwood-ai-labs",
    "product": "github-kanban-mcp-server",
    "versions": [
      {
        "version": "= 0.3.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/Sunwood-ai-labs/github-kanban-mcp-server/blob/v0.4.0/src/handlers/comment-handlers.ts
github	www.github.com/Sunwood-ai-labs/github-kanban-mcp-server/blob/main/src/handlers/tool-handlers.ts
github	www.github.com/Sunwood-ai-labs/github-kanban-mcp-server/security/advisories/GHSA-6jx8-rcjx-vmwf
github	www.github.com/Sunwood-ai-labs/github-kanban-mcp-server/blob/main/src/handlers/comment-handlers.ts

15 Apr 2026 00:35Current

7.3High risk

Vulners AI Score7.3

CVSS 49.3

EPSS0.01845

SSVC

CWE-78