CVE-2026-117567

esp-mcp project parameters reach shell execution

horw · esp-mcp

First documented disclosure · Review checkpoint

Summary

Crafted project, target or port arguments could run unintended commands on the MCP host.

Severity and exploitation evidence

High · 8.5/10 · CVSS 4.0. Severity source.

Exploitation not established: The reviewed sources describe a vulnerability and demonstration, not established malicious exploitation.

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

ESP-IDF tool handlers interpolate parameters into commands executed through an asynchronous shell.

Conditions required

Ability to supply or influence arguments to the affected MCP tools.

Potential impact

Command execution as the MCP service user, with possible modification of accessible build projects.

Affected versions and configurations

Through commit 28afddf9ff41ada117bb45fd49b526d3bf89749e.

Fix and mitigation status

No fixed version established in the reviewed sources.

Practical next steps

Disable affected tools until verified remediation; separate process arguments and constrain toolchain inputs.

Operating lesson

Validating one build option does not secure every path to a shell.

Evidence and limits

The unchanged October 24 issue predates October 27 assignment. A separately mentioned path-disclosure issue is not counted here.

Sources