PT-2025-35225 · Aiondadotcom · Mcp-Ssh

Amgisn

·

CVE-2025-9654

·

Published

2025-08-29

·

Updated

2025-09-01

CVSS v2.0

6.5

Medium

VectorAV:N/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions AiondaDotCom mcp-ssh versions through 1.0.3
Description A security flaw exists in AiondaDotCom mcp-ssh related to an unknown functionality within the file server-simple.mjs component. Manipulation of this functionality can lead to remote command injection.
Recommendations Upgrade to version 1.0.4. Upgrade to version 1.1.0.

Exploit

Fix

Command Injection

Special Elements Injection

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-77CWE-74

Related Identifiers

CVE-2025-9654
GHSA-694P-3FXC-M92H

Affected Products

Mcp-Ssh