Arbitrary Argument Injection Affecting @aiondadotcom/mcp-ssh package, versions <1.3.5
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applicationsSnyk Learn
Learn about Arbitrary Argument Injection vulnerabilities in an interactive lesson.
Start learning- Snyk IDSNYK-JS-AIONDADOTCOMMCPSSH-16420248
- published5 May 2026
- disclosed14 Apr 2026
- creditUnknown
Introduced: 14 Apr 2026
CVE NOT AVAILABLE CWE-78 (opens in a new tab)How to fix?
Upgrade @aiondadotcom/mcp-ssh to version 1.3.5 or higher.
Overview
@aiondadotcom/mcp-ssh is a MCP Agent for managing SSH hosts - A Model Context Protocol server for SSH operations
Affected versions of this package are vulnerable to Arbitrary Argument Injection via improper handling of the hostAlias, command, localPath, or remotePath arguments. An attacker can execute arbitrary commands on the local machine by injecting specially crafted input that is interpreted as options or shell metacharacters by the underlying SSH or shell process. This can lead to exposure of sensitive information such as SSH keys, browser cookies, and server credentials, and may allow further compromise of the system. This is only exploitable if the application ingests attacker-controlled text, such as through prompt injection into an LLM-driven workflow.