CVE-2026-19044 in godot-mcp
Summary
by MITRE • 08/06/2026
A flaw has been found in LeeSinLiang godot-mcp 0.1.0. Affected by this vulnerability is the function executeOperation of the file src/index.ts of the component create_scene/add_node. This manipulation of the argument projectPath causes command injection. The attack needs to be launched locally. The project was informed of the problem early through an issue report but has not responded yet.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Analysis
by VulDB Data Team • 08/06/2026
The vulnerability identified in LeeSinLiang godot-mcp version 0.1.0 represents a critical command injection flaw within the executeOperation function of the create_scene/add_node component. This security weakness resides in the src/index.ts file where user-controllable input is improperly handled during project path processing, creating an avenue for malicious code execution. The vulnerability specifically manifests when the projectPath argument is manipulated by an attacker, allowing arbitrary commands to be executed within the system context where the application operates.
The technical implementation of this flaw demonstrates a classic command injection vulnerability that falls under CWE-78, which specifically addresses improper neutralization of special elements used in OS commands. The attack vector requires local execution privileges, meaning that an attacker must already have access to the system where the vulnerable software is installed to exploit this weakness. This local requirement reduces the attack surface compared to remote exploitation scenarios but still represents a significant security risk, particularly in environments where multiple users have access to the same system or when privilege escalation occurs through other means.
The operational impact of this vulnerability extends beyond simple command execution capabilities, as it enables attackers with local access to potentially escalate their privileges and perform unauthorized actions on the affected system. The compromised component specifically handles scene creation and node management within Godot projects, making the attack surface particularly dangerous for developers working with game development environments where such tools are commonly used. The vulnerability essentially allows an attacker to execute arbitrary commands with the privileges of the user running the godot-mcp tool, potentially leading to data exfiltration, system compromise, or further lateral movement within the network.
Security practitioners should note that this vulnerability aligns with ATT&CK technique T1059.003, which covers command and scripting interpreter usage through shell commands. The lack of response from the project maintainers following the initial issue report creates additional risk for users who may be unaware of the potential compromise in their development environments. Organizations should implement immediate mitigation strategies including restricting local access to systems running vulnerable versions, implementing proper input validation and sanitization measures, and considering temporary workarounds such as disabling the affected component until a patched version becomes available. Additionally, monitoring for unusual system activity or command execution patterns may help detect exploitation attempts in environments where the vulnerability cannot be immediately remediated.
The vulnerability highlights the importance of secure coding practices in development tools and emphasizes the need for proper input validation mechanisms to prevent arbitrary code execution scenarios. Given that this is a local privilege escalation vector, it particularly affects development environments where multiple users may have access to shared systems or where developers operate with elevated privileges during project development. The absence of response from the project maintainers suggests potential security awareness gaps within open source tooling communities, underscoring the need for proactive security measures and regular vulnerability assessments in development toolchains.