CVE-2026-7730 Details
Description
A weakness has been identified in privsim mcp-test-runner 0.2.0. Impacted is the function child_process.spawn of the file src/index.ts of the component MCP Interface. Executing a manipulation of the argument command can lead to os command injection. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
A command injection vulnerability has been identified in privsim mcp-test-runner version 0.2.0, specifically within the MCP 'run_tests' command. The vulnerability arises because the tool executes user-supplied command arguments via 'child_process.spawn' with 'shell: true', without proper validation or sanitization. This flaw allows an attacker with network access to the MCP interface to inject arbitrary shell commands, potentially leading to full host compromise, including unauthorized data access, modification of files or application state, and disruption of services. The vulnerability has been publicly disclosed and exploited.
Users are advised not to expose the MCP server to untrusted clients until a fix is available. Access to the 'run_tests' tool should be restricted to trusted local users. Additionally, non-generic framework execution could be disabled or subjected to the same command validation applied to generic frameworks. Running the MCP server with a low-privilege OS account and a restricted working directory can also help mitigate the risk.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed May 4, 2026CISA-ADP
Assessed May 4, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/BruceJqs/public_exp/issues/37 | [email protected] | ExploitIssue TrackingTechnical Description |
| https://github.com/privsim/mcp-test-runner/ | [email protected] | ProductSource CodeVendor |
| https://github.com/privsim/mcp-test-runner/issues/24 | [email protected] | ExploitIssue TrackingTechnical DescriptionVendor |
| https://vuldb.com/submit/807541 | [email protected] | Permission Required |
| https://vuldb.com/vuln/360905 | [email protected] | AdvisoryPermission Required |
| https://vuldb.com/vuln/360905/cti | [email protected] | AdvisoryPermission Required |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-77 | Improper Neutralization of Special Elements used in a Command ('Command Injection') | [email protected] |
| CWE-78 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| privsim mcp-test-runner | All versions |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| May 4, 2026 | New CVE Received | [email protected] |