Tools AI Risk Radar ai-incident-0265
Incident record
An ai-sdlc tool could run injected shell commands
- Severity
- High
- Status
- Patched
- Type
- Infra Vuln
- Target
- ai-sdlc plugin MCP server through 0.31.2
- Actor
- Researcher disclosure
- CVE
- CVE-2026-117558
What happened
The repository argument supplied to an issue or pull-request tool could become a shell command. An agent influenced by untrusted content could pass that argument to the affected MCP server.
The original issue and source-code fix are dated 23 October; the CVE followed on 27 October. The fix replaces shell execution with separate program arguments and validates the repository’s owner/name format. Deployments need code containing that fix; the reviewed evidence establishes the commit rather than a numbered fixed release. The CNA rates the issue High.
Sources
- Canonical CVE recordraw.githubusercontent.com/CVEProject/cvelistV5/main/cves/202…
- Original issuegithub.com/ai-sdlc-framework/ai-sdlc/issues/1970
- Source-code fixgithub.com/ai-sdlc-framework/ai-sdlc/commit/717d7ecf068b714f…
One record from the AI Risk Radar, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 28 October 2026