CVE-2026-117568

mcp-ffmpeg file paths can carry executable shell syntax

bitscorp-mcp · mcp-ffmpeg

First documented disclosure · Review checkpoint

Summary

Crafted video or output paths could make media tools execute an unintended host command.

Severity and exploitation evidence

High · 7.3/10 · CVSS 4.0. Severity source.

Exploitation not established: The reviewed sources describe a vulnerability and demonstration, not established malicious exploitation.

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

Double-quoted path interpolation into child_process.exec still allows shell expansion.

Conditions required

MCP argument control plus an existing file or directory with a suitable crafted name; the CNA marks additional attack requirements.

Potential impact

Command execution with the MCP server user's permissions.

Affected versions and configurations

Through 1.0.5.

Fix and mitigation status

No fixed version established in the reviewed sources.

Practical next steps

Disable affected tools until patched; invoke FFmpeg and FFprobe with argument arrays and constrained paths.

Operating lesson

Path normalization and file-existence checks do not neutralize shell syntax.

Evidence and limits

October 24 is the first specific public disclosure reviewed. The August request for a private contact withheld technical details; neither date establishes an attack.

Sources