PYSEC-2026-473 PraisonAI has an incomplete fix for CVE-2026-34935 - OS Command Injection

Summary The fix for PraisonAI's MCP command handling does not add a command allowlist or argument validation to parsemcpcommand, allowing arbitrary executables like bash, python, or /bin/sh with inline code execution flags to pass through to subprocess execution. Affected Package - Ecosystem: PyP...

aws-mcp has a Command Injection Remote Code Execution Vulnerability

aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability.The specific flaw exists within the handling...

PraisonAI has an incomplete fix for CVE-2026-34935 - OS Command Injection

SummaryThe fix for PraisonAI's MCP command handling does not add a command allowlist or argument validation to parsemcpcommand, allowing arbitrary executables like bash, python, or /bin/sh with inline code execution flags to pass through to subprocess execution. Affected Package- Ecosystem: PyPI-...

PYSEC-2026-559 Upsonic: remote code execution vulnerability in its MCP server/task creation functionality

Upsonic 0.71.6 contains a remote code execution vulnerability in its MCP server/task creation functionality. The application allows users to define MCP tasks with arbitrary command and args values. Although an allowlist exists, certain allowed commands npm, npx accept argument flags that enable...

PraisonAI: OS Command Injection in MCPHandler.parse_mcp_command()

SummaryThe --mcp CLI argument is passed directly to shlex.split and forwarded through the call chain to anyio.openprocess with no validation, allowlist check, or sanitization at any hop, allowing arbitrary OS command execution as the process user. Detailscli/features/mcp.py:61 source -...

PYSEC-2026-471 PraisonAI: OS Command Injection in MCPHandler.parse_mcp_command()

Summary The --mcp CLI argument is passed directly to shlex.split and forwarded through the call chain to anyio.openprocess with no validation, allowlist check, or sanitization at any hop, allowing arbitrary OS command execution as the process user. Details cli/features/mcp.py:61 source -...

grizabella (>=0.1.0b1, <=0.1.1b1), pypi-query-mcp-server (0.1.0) potentially affected by CVE-2026-32871 via fastmcp (0.2.0)

fastmcp PYPI version 0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - grizabella =0.1.0b1, =0.1.1b1 - pypi-query-mcp-server 0.1.0 Source cves: CVE-2026-32871 Source advisory: OSV:PYSEC-2026-338...

iflow-mcp-winautowx (1.0.0) potentially affected by CVE-2026-32871 via fastmcp (2.0.0)

fastmcp PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - iflow-mcp-winautowx 1.0.0 Source cves: CVE-2026-32871 Source advisory: OSV:PYSEC-2026-338...

agentsphere-mcp-server (1.8.0), omni-bot-sdk (>=0.0.1, <=2.0.0) potentially affected by CVE-2026-32871 via fastmcp (2.10.1)

fastmcp PYPI version 2.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - agentsphere-mcp-server 1.8.0 - omni-bot-sdk =0.0.1, =2.0.0 Source cves: CVE-2026-32871 Source advisory: OSV:PYSEC-2026-338...

beads-mcp (>=0.49.2, <=0.49.6), callmymcp (1.0.0) +5 more potentially affected by CVE-2026-32871 via fastmcp (2.14.4)

fastmcp PYPI version 2.14.4 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - beads-mcp =0.49.2, =0.0.1, =0.2.7, =0.2.8 - upstock-mcp 2.2.0 Source cves: CVE-2026-32871 Source advisory: OSV:PYSEC-2026-338...

aio-tests-mcp (>=0.1.0, <=0.1.2), aiowhitebit-mcp (0.2.5) +4 more potentially affected by CVE-2026-32871 via fastmcp (2.5.1)

fastmcp PYPI version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - aio-tests-mcp =0.1.0, =0.1.8, =1.0.0, =1.0.78 - iflow-mcp-sean-tate-fastmcp-python-oauth2-with-entra-id 0.1.0 - sakit 11.0.0 Source cves:...

mcp-atlassian (>=0.10.3, <=0.10.4) potentially affected by CVE-2026-32871 via fastmcp (2.2.7)

fastmcp PYPI version 2.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - mcp-atlassian =0.10.3, =0.10.4 Source cves: CVE-2026-32871 Source advisory: OSV:PYSEC-2026-338...

aiowhitebit-mcp (0.2.7), basic-memory (>=0.14.3, <=0.14.4) +2 more potentially affected by CVE-2026-32871 via fastmcp (2.10.2)

fastmcp PYPI version 2.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - aiowhitebit-mcp 0.2.7 - basic-memory =0.14.3, =2.2.0, =0.0.0, =1.0.0 Source cves: CVE-2026-32871 Source advisory: OSV:PYSEC-2026-338...

mysql-mcp-server-pro-plus (>=0.2.3, <=0.3.0), workspace-mcp (>=1.2.0, <=1.4.2) potentially affected by CVE-2026-32871 via fastmcp (2.11.1)

fastmcp PYPI version 2.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - mysql-mcp-server-pro-plus =0.2.3, =1.2.0, =1.4.2 Source cves: CVE-2026-32871 Source advisory: OSV:PYSEC-2026-338...

iflow-mcp-mariadb-mariadb-server (0.2.3) potentially affected by CVE-2026-32871 via fastmcp (2.12.1)

fastmcp PYPI version 2.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - iflow-mcp-mariadb-mariadb-server 0.2.3 Source cves: CVE-2026-32871 Source advisory: OSV:PYSEC-2026-338...

heaven-framework (>=0.1.15, <=0.1.22), oracle-oci-api-mcp-server (>=1.0.0, <=1.0.1) +18 more potentially affected by CVE-2026-32871 via fastmcp (2.12.2)

fastmcp PYPI version 2.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - heaven-framework =0.1.15, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.1 and more Source...

alation-ai-agent-mcp (1.0.0rc3), codesecure-mcp (1.0.0b9) +4 more potentially affected by CVE-2026-32871 via fastmcp (2.14.0)

fastmcp PYPI version 2.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - alation-ai-agent-mcp 1.0.0rc3 - codesecure-mcp 1.0.0b9 - korean-stat-mcp 0.1.4 - mcp-proxy-for-aws =1.1.5, =0.3.0, =0.5.0 - seclab-taskflow-agent...

agent-mcp-server (0.0.4.0), beads-mcp (>=0.30.1, <=0.47.1) +10 more potentially affected by CVE-2026-32871 via fastmcp (2.14.1)

fastmcp PYPI version 2.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - agent-mcp-server 0.0.4.0 - beads-mcp =0.30.1, =1.36.5, =0.2.0, =0.0.3, =0.11.0, =0.1.14, =8.5.0, =0.3.1, =0.2.0, =0.2.6 Source cves: CVE-2026-328...

closelink-mcp (1.1.7) potentially affected by CVE-2026-32871 via fastmcp (2.3.1)

fastmcp PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - closelink-mcp 1.1.7 Source cves: CVE-2026-32871 Source advisory: OSV:PYSEC-2026-338...

iflow-mcp-erickjtorres-flutter-surf-mcp (0.1.0), one-prompt-agents (>=0.0.1, <=0.0.3) potentially affected by CVE-2026-32871 via fastmcp (2.3.4)

fastmcp PYPI version 2.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - iflow-mcp-erickjtorres-flutter-surf-mcp 0.1.0 - one-prompt-agents =0.0.1, =0.0.3 Source cves: CVE-2026-32871 Source advisory: OSV:PYSEC-2026-338...