CVE-2026-2178: xcode-mcp-server Command Injection Vulnerability
Summary
CVE-2026-2178: xcode-mcp-server vulnerable to Command Injection. Affects xcode-mcp-server versions < 1.0.3. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
xcode-mcp-server is an npm package designed to facilitate the integration of Xcode tools into various development workflows. It allows developers to run and manage Xcode-related tasks programmatically. However, a critical vulnerability has been identified in the package that exposes it to command injection attacks, potentially compromising system security.
Vulnerability Detail
A command injection vulnerability exists in the function registerXcodeTools within the src/tools/xcode/index.ts file of the xcode-mcp-server package, specifically in versions up to 1.0.3. The vulnerability arises from improper handling of user-supplied input in the args argument, allowing an attacker to execute arbitrary commands on the server. This could lead to unauthorized access, data manipulation, or system compromise, making it a significant security risk.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, you can restrict access to the affected functionality or validate and sanitize all user inputs before processing them to mitigate the risk of command injection.
Conclusion
The xcode-mcp-server package has a critical command injection vulnerability that can be exploited remotely. Users are strongly encouraged to update to the patched version to mitigate risks. Additionally, implementing input validation can serve as a temporary workaround. Regular monitoring for vulnerabilities using tools like Vulert can help maintain application security.
See every vulnerability recorded for xcode-mcp-server →
FAQ
The CVSS score of this vulnerability is 6.3, indicating a medium severity level.
Yes, the vulnerability can be exploited remotely, allowing attackers to execute commands on the server.
Yes, a patch has been identified and users are advised to update to the latest version of xcode-mcp-server.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Exploitation of this vulnerability could lead to unauthorized command execution, data breaches, and overall system compromise.
