Horizon Alert
Summary of the vulnerability and why it matters
An os command injection vulnerability in radare2-mcp allows attackers to execute arbitrary commands on a host. This is possible by sending specially crafted input through the jsonrpc interface, bypassing filters and enabling remote code execution without authentication.
- Remote execution is possible.
- Requires no authentication.
- Affects radare2-mcp versions 1.6.0 and earlier.
Attack Path
How an attacker could exploit the issue
An attacker could exploit this vulnerability by sending specially crafted JSON-RPC requests to the `radare2-mcp` service. By injecting shell metacharacters into user-controlled input passed to the `r2_cmd_str()` function, attackers can bypass filters and execute arbitrary commands on the host system. This attack does not require any authentication and can be performed remotely.
- Unauthenticated network access required.
- Targets JSON-RPC interface parameters.
- Shell metacharacter bypass is the key.
Live Threat
Current exploitation, exposure, and threat context
This vulnerability in radare2-mcp presents a critical risk due to its unauthenticated remote command injection capabilities. Attackers are likely to target this flaw because it allows for direct code execution without requiring any prior access or interaction from the user, making it highly attractive for widespread exploitation. The bypass of command filters via shell metacharacters is a well-understood technique for achieving such intrusions.
- No evidence of active exploitation.
- Public exploit code is not yet observed.
- The vulnerability is recently disclosed.
Priority actions
Operational Fix
Recommended remediation, mitigation, and detection steps
Prioritize immediate patching of radare2-mcp for CVE-2026-6942, as it allows unauthenticated remote command execution. If patching is delayed, isolate affected services and monitor for suspicious network activity.
- Patch radare2-mcp to a fixed version.
- Isolate affected services from the network.
- Monitor for shell metacharacter usage.
