OASB
Attacks/MCP Exploitation/MCP-005
CRITICALCWE-78

MCP-005 MCP Command Injection via Pipe

MCP Exploitation: Attempts to exploit MCP tool call parameters (path traversal, command injection, SSRF)

Description

Attempts command injection using pipe operator

Remediation

Block pipe operators in command parameters. Use parameterized execution.

Severity

CRITICAL

OASB Control

2.3

CWE

CWE-78
PreviousMCP-004 MCP Command InjectionNextMCP-006 MCP SSRF to Cloud Metadata