Log in / Sign up

Vulnerability details

CVE-2026-81097

maquina-app rails-mcp-server

rails-mcp-server 1.4.0 through 1.6.0 OS Command Execution via execute_ruby PTY Escape

CVSS 4.0
8.6High

Official description

The execute_ruby tool is documented as a read-only Ruby sandbox and is enforced by a pattern denylist together with replacements for the process-spawning methods on Kernel. The pseudo-terminal library's spawn entry points are neither in the denylist nor replaced, so a normal tool call could reach them and start a shell, executing commands as the account running the server and outside the guarded methods. The denylist was introduced with the tool in 1.4.0 and never covered those entry points through 1.6.0. Version 1.6.1 restricts the requires the sandbox permits to a data-only list and blocks dynamic dispatch to execution entry points; 2.0.0 removes the tool.

CVSS scores

ScoreVersionSourceVector
8.6High 4.0 CVEProject cvelistV5 (CNA) (VulnCheck) CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
8.4High 3.1 CVEProject cvelistV5 (CNA) (VulnCheck) CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

VendorProductVersionsSource
maquina-app rails-mcp-server 1.4.0 ≤ v ≤ 1.6.0 CVEProject cvelistV5 (CNA)

References and advisories

4
Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published
2026-08-27
Last updated
2026-08-29
State
Published
Assigner (CNA)
VulnCheck

Exploit prediction (EPSS)

0.23%
Probability of exploitation in 30 days
14.5%
Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable
No
Exploitation
None
Technical impact
Total

Weaknesses (CWE)

  • CWE-78
    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')