Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2025-53100

RestDB's Codehooks.io MCP Server Vulnerable to Command Injection

Description

RestDB's Codehooks.io MCP Server is an MCP server on the Codehooks.io platform. Prior to version 0.2.2, the MCP server is written in a way that is vulnerable to command injection attacks as part of some of its MCP Server tools definition and implementation. This could result in a user initiated remote command injection attack on a running MCP Server. This issue has been patched in version 0.2.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

RestDB codehooks-mcp-server

  • < 0.2.2affected

References