Loading vulnerability…
CVE-2025-54994 is a command injection vulnerability in the @akoskm/create-mcp-server-stdio MCP server starter kit using StdioServerTransport. Versions prior to 0.0.13 expose an MCP tool named which-app-on-port that invokes the Node.js child_process.exec API with untrusted user-controlled input concatenated into the executed command. Because exec passes the constructed command through a shell, an attacker can inject shell metacharacters or additional commands via the tool input and cause unintended operating system command execution. The issue is fixed in version 0.0.13.
Mallory correlates every CVE against your assets, your vendors, and active adversary campaigns. Know which vulnerabilities matter for you, not just which ones are loud.
What it means. What to do now. Patch path, mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
If you can’t patch tonight, do this now.
which-app-on-port tool, or prevent untrusted users or agents from invoking it. Restrict exposure of the MCP server to trusted clients only, sandbox the service, run it with minimal OS privileges, and isolate it from sensitive files, credentials, and network segments. Additionally, reject or strictly validate any input that could reach shell execution paths, and avoid using exec with user-influenced data altogether.Patch, then assume compromise.
child_process.exec or similar shell-invoking APIs with user-controlled input. Replace unsafe command construction with safer alternatives such as spawn or execFile using fixed binaries and strictly separated argument lists, and apply strict allowlisting and validation for any user-supplied parameters.No public exploits tracked yet. Mallory keeps watching.
No public exploit code observed for this vulnerability.
5 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
A previously reported vulnerability in @akoskm/create-mcp-server-stdio caused by the same MCP STDIO architectural issue that can enable command execution.
An STDIO MCP-related vulnerability in @akoskm/create-mcp-server-stdio mentioned as another finding reported by other researchers.
A critical command injection vulnerability in @akoskm/create-mcp-server-stdio MCP server starter kit caused by unsafe use of Node.js child_process exec with untrusted user input in the `which-app-on-port` tool.
Query your assets running an affected version, and investigate the blast radius.
Every observed campaign linking this CVE to a named adversary.
Malware families riding this exploit, with evidence and IOCs.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Cross-references every affected SKU, including bundled OEM variants.
Community discussion across Reddit, Mastodon, and other social sources.