CVE-2026-117573 Details
Description
hagent through commit 761eec6 contains an OS command injection vulnerability that allows MCP clients to execute shell commands by injecting metacharacters into the args parameter of the hagent_arduino and hagent_esp32 tools. Attackers or prompt-injected agents can supply crafted args interpolated into arduino-cli and idf.py commands run with subprocess.run(shell=True) to execute commands as the MCP server user.
A command injection vulnerability has been identified in the Hagent framework, specifically in the MCP tools for Arduino and ESP32, prior to the commit 761eec6. This vulnerability allows users to execute arbitrary shell commands by injecting metacharacters into the 'args' parameter of the 'hagent_arduino' and 'hagent_esp32' tools. The injected commands are executed with the same privileges as the MCP server user, potentially leading to unauthorized actions on the user's machine.
To address this vulnerability, it is recommended to sanitize the 'args' parameter before interpolation into command strings. This can be done by validating the input against an allowlist of permitted values or by using the list-form of 'subprocess.run()' which does not invoke a shell, thereby preventing command injection.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 27, 2026CISA-ADP
Assessed Nov 2, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/masc-ucsc/hagent/issues/98 | CISA-ADP | ExploitIssue TrackingTechnical DescriptionVendor |
| https://github.com/masc-ucsc/hagent | [email protected] | Vendor |
| https://github.com/masc-ucsc/hagent/blob/761eec627a1e6fb128a2a8ce9245aa595cc2f7af/hagent/mcp/mcp_arduino.py#L776 | [email protected] | Source CodeVendor |
| https://github.com/masc-ucsc/hagent/blob/761eec627a1e6fb128a2a8ce9245aa595cc2f7af/hagent/mcp/mcp_esp32.py#L682 | [email protected] | Source CodeVendor |
| https://github.com/masc-ucsc/hagent/issues/98 | [email protected] | ExploitIssue TrackingTechnical DescriptionVendor |
| https://www.vulncheck.com/advisories/hagent-through-commit-761eec6-os-command-injection-via-arduino-and-esp32-mcp-tools | [email protected] | AdvisoryBundleRemedy |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-78 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| masc-ucsc hagent | <= 761eec627a1e6fb128a2a8ce9245aa595cc2f7af |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Nov 2, 2026 | CVE Modified | CISA-ADP |
| Oct 27, 2026 | New CVE Received | [email protected] |