Skip to content
Fencer Intel
high 7.5

CVE-2025-54073 in the critical feed json

mcp-package-docs vulnerable to command injection in several tools

published last yr. modified 4mo ago also GHSA-vf9j-h32g-2764 , EUVD-2025-21894

cvss
7.5
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
11.3%
EPSS 11.3% chance of exploitation in 30 days, percentile 96%
public exploits
0
none known

Summary

mcp-package-docs is an MCP (Model Context Protocol) server that provides LLMs with efficient access to package documentation across multiple programming languages and language server protocol (LSP) capabilities. A command injection vulnerability exists in the `mcp-package-docs` MCP Server prior to the fix in commit cb4ad49615275379fd6f2f1cf1ec4731eec56eb9. The vulnerability is caused by the unsanitized use of input parameters within a call to `child_process.exec`, enabling an attacker to inject arbitrary system commands. Successful exploitation can lead to remote code execution under the server process's privileges. The server constructs and executes shell commands using unvalidated user input directly within command-line strings. This introduces the possibility of shell metacharacter injection (`|`, `>`, `&&`, etc.). Commit cb4ad49615275379fd6f2f1cf1ec4731eec56eb9 in version 0.1.27 contains a fix for the issue, but upgrading to 0.1.28 is recommended.

Patch / fix

  • npm mcp-package-docs 0.1.28

Is CVE-2025-54073 in your dependencies? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

CISA SSVC

Exploitation
Proof of concept is public
Automatable
no
Technical impact
total
Assessed
last yr.

Exploit prediction

11.29% chance of exploitation in the next 30 days, higher than 96% of all scored CVEs (FIRST EPSS, 2026-11-09).

Exploits and checks

  • github.com https://github.com/sammcj/mcp-package-docs/security/advisories/GHSA-vf9j-h32g-2764 referenced PoC, tagged "exploit" by a source, unverified
  • github.com https://github.com/advisories/GHSA-3q26-f695-pp76 referenced PoC, tagged "exploit" by a source, unverified
  • github.com https://github.com/advisories/GHSA-5w57-2ccq-8w95 referenced PoC, tagged "exploit" by a source, unverified
  • github.com https://github.com/advisories/GHSA-gjv4-ghm7-q58q referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
CNA 3.1 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
GitHub 3.1 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected packages

ecosystem package affected fixed in
npm mcp-package-docs
<0.1.28
0.1.28

Affected products

  • sammcj mcp-package-docs

Classification

Weakness
  • CWE-77 Improper Neutralization of Special Elements used in a Command

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.