tumf/mcp-shell-server

v1.0.4 Security

This release includes 5 security fixes for security teams reviewing exposed deployments.

Published 1mo MCP Developer Tools

✓ No known CVEs patched

This release patches 5 known CVEs

Topics

audit-log command-whitelist mcp model-context-protocol security shell

Affected surfaces

rce_ssrf breaking_upgrade

Summary

AI summary

Hardened subprocess execution to prevent command injection and other bypass vectors.

Full changelog

Security release for MCP Shell Server.

Replaced shell-string subprocess execution with argv-based create_subprocess_exec() for normal commands and pipelines.
Hardened ALLOW_PATTERNS to use full command-name matching and reject unsafe shell metacharacter forms.
Rejected default exec-capable bypass vectors including shells/interpreters, env, xargs, find -exec, awk system(), tar --checkpoint-action=exec, and git external aliases.
Enforced redirection containment under the validated working directory before file open side effects.
Isolated child process environments from parent secrets unless variables are explicitly allowlisted.
Added default/max timeout handling, output byte caps, and structured redacted audit logging.

PyPI: mcp-shell-server==1.0.4

Replaced shell-string subprocess execution with argv-based `create_subprocess_exec()` to prevent injection.
Hardened `ALLOW_PATTERNS` for full command-name matching and rejected unsafe shell metacharacter forms.
Rejected default exec-capable bypass vectors including shells/interpreters, `env`, `xargs`, `find -exec`, `awk system()`, `tar --checkpoint-action=exec`, and git external aliases.
Enforced redirection containment under the validated working directory before file open side effects.
Isolated child process environments from parent secrets unless variables are explicitly allowlisted.

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track tumf/mcp-shell-server

Get notified when new releases ship.

About tumf/mcp-shell-server

A secure shell command execution server implementing the Model Context Protocol (MCP)