CVE-2026-3484: MCP NMAP Server Command Injection Vulnerability
Summary
CVE-2026-3484: MCP NMAP Server has an Injection vulnerability. Affects mcp-nmap-server versions < 1.0.1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
MCP NMAP Server is a tool that facilitates the execution of Nmap commands through a command-line interface. It is designed to enhance the usability of Nmap by providing a more accessible way to execute network scanning commands. The server operates on a rolling release system, which means it continuously integrates updates and features without traditional versioning. However, this approach can sometimes lead to undisclosed vulnerabilities, such as the one identified in this report.
Vulnerability Detail
A command injection vulnerability exists in the MCP NMAP Server, specifically within the Nmap CLI Command Handler's child_process.exec function located in src/index.ts. This vulnerability allows an attacker to execute arbitrary commands on the server from a remote location, potentially leading to unauthorized access or data manipulation. The flaw arises from improper handling of user input, which can be exploited to inject malicious commands. The severity of this vulnerability is classified as moderate, with a CVSS score of 6.3, indicating a significant risk that should be addressed promptly.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
If immediate patching is not feasible, consider implementing input validation and sanitization measures to mitigate the risk of command injection. Ensure that any user input is thoroughly checked and cleaned before being processed by the command handler.
Conclusion
The MCP NMAP Server has a command injection vulnerability that poses a moderate risk to users. It is crucial to update to the patched version to mitigate this risk. Additionally, implementing input validation can serve as a temporary workaround while the update is applied.
See every vulnerability recorded for mcp-nmap-server →
FAQ
The vulnerability is a command injection flaw that allows attackers to execute arbitrary commands on the server.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Exploitation of this vulnerability could lead to unauthorized access, data manipulation, or complete control over the affected server.
Yes, a patch is available. You should update to the version that includes the fix identified by the patch hash 30a6b9e1c7fa6146f51e28d6ab83a2568d9a3488.
Vulert is a service that monitors and alerts for open-source vulnerabilities in your software using just package-lock.json. It provides real-time alerts for vulnerabilities.
