CVE-2025-66401: MCP Watch has a Critical Command Injection in cloneRepo allows Remote Code Execution (RCE) via malicious URL

December 2, 2025

The MCPScanner class contains a critical Command Injection vulnerability in the cloneRepo method. The application passes the user-supplied githubUrl argument directly to a system shell via execSync without sanitization. This allows an attacker to execute arbitrary commands on the host machine by appending shell metacharacters to the URL.

References

github.com/advisories/GHSA-27m7-ffhq-jqrm
github.com/kapilduraphe/mcp-watch
github.com/kapilduraphe/mcp-watch/commit/e7da78c5b4b960f8b66c254059ad9ebc544a91a6
github.com/kapilduraphe/mcp-watch/security/advisories/GHSA-27m7-ffhq-jqrm
nvd.nist.gov/vuln/detail/CVE-2025-66401

Code Behaviors & Features

Detect and mitigate CVE-2025-66401 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →