CVE-2026-116369

A vulnerability was identified in Sunwood-ai-labs github-kanban-mcp-server up to 0.4.0. Impacted is the function handleListIssues of the file src/handlers/issue-handlers.ts. Such manipulation of the argument state/labels leads to os command injection. The attack can be launched remotely. Upgradin...

CVE-2026-116369 Sunwood-ai-labs github-kanban-mcp-server issue-handlers.ts handleListIssues os command injection

A vulnerability was identified in Sunwood-ai-labs github-kanban-mcp-server up to 0.4.0. Impacted is the function handleListIssues of the file src/handlers/issue-handlers.ts. Such manipulation of the argument state/labels leads to os command injection. The attack can be launched remotely. Upgradin...

EUVD-2026-109970

A vulnerability was identified in Sunwood-ai-labs github-kanban-mcp-server up to 0.4.0. Impacted is the function handleListIssues of the file src/handlers/issue-handlers.ts. Such manipulation of the argument state/labels leads to os command injection. The attack can be launched remotely. Upgradin...

CVE-2026-116369

The Sunwood-ai-labs github-kanban-mcp-server (versions up to 0.4.0 ) is vulnerable to a remote OS command injection vulnerability. The flaw exists in the handleListIssues function within the src/handlers/issue-handlers.ts file, where improper handling of the state/labels argument allows for comma...