CVE-2026-30625: Upsonic Remote Code Execution Vulnerability in MCP Server/Task Creation
Summary
CVE-2026-30625: Upsonic: remote code execution vulnerability in its MCP server/task creation functionality. Affects upsonic versions < 0.72.0. Fixed in 0.72.0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Upsonic is a Python-based application available on PyPI that facilitates the creation and management of tasks through its MCP (Multi-Command Processor) server. It allows users to define tasks with specific commands and arguments, enabling automation and efficient task management. However, the application has a critical vulnerability that can be exploited to execute arbitrary commands on the host system.
Vulnerability Detail
Upsonic version 0.71.6 contains a remote code execution vulnerability in its MCP server/task creation functionality. Users can define MCP tasks with arbitrary command and argument values. Although there is an allowlist for commands, certain allowed commands like npm and npx can accept argument flags that lead to the execution of arbitrary OS commands. This vulnerability can be exploited by crafting malicious MCP tasks, potentially allowing attackers to execute commands with the same privileges as the Upsonic process, leading to severe security risks.
How To Fix
Minimum fixed version
0.72.0
This is the first release that contains the fix.
pip install --upgrade "upsonic==0.72.0"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, avoid using the npm and npx commands in your MCP tasks until you can update to the patched version. Additionally, review and restrict the commands that can be executed through the MCP server to minimize exposure to this vulnerability.
Conclusion
The remote code execution vulnerability in Upsonic's MCP server/task creation functionality poses a significant risk to users of version 0.71.6. It is crucial to update to version 0.72.0 or later to mitigate this risk. Users should also consider using Vulert for ongoing monitoring of vulnerabilities in their open-source dependencies.
See every vulnerability recorded for upsonic →
FAQ
The CVSS score of this vulnerability is 9.8, indicating a critical level of severity.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
Exploitation of this vulnerability can lead to remote code execution, allowing attackers to execute arbitrary commands on the host system, which can compromise the entire application and its data.
Yes, Vulert can monitor and alert you in real-time for open-source vulnerabilities in your software using just the Pipfile.lock.
If you cannot update immediately, ensure to restrict the use of vulnerable commands in your MCP tasks and monitor your application for any suspicious activity.
Related vulnerabilities
Recent vulnerabilities recorded for upsonic.
