CVE-2026-102243 Details

A command injection vulnerability has been identified in MODSetter SurfSense versions through 2.0.3, specifically within the MCP Connector Integration component. The issue arises from an unvalidated processing of the file '/api/search-source/connectors/mcp/test', allowing authenticated users to inject arbitrary commands, arguments, and environment variables. This exploitation occurs remotely, with the injected commands executed as root in the backend container, potentially leading to unauthorized access to application secrets and database manipulation.

To address this vulnerability, it is recommended to disable the stdio MCP transport on the hosted API or restrict it to a fixed wrapper with an allowlist of package names. Additionally, user-supplied commands and environment variables should be sanitized or restricted before being processed. The vulnerable endpoint should also be protected with appropriate workspace permissions and rate limits.