PT-2026-126428

Kali-GPT through commit a608c74 contains an OS command injection vulnerability in execute tool in kali gpt/tools/mcp server.py that allows MCP clients to run commands via unsanitized scanner parameters. Attackers or prompt-injected agents can embed shell metacharacters in parameters like target,...