{
 "id": "AIR-2025-0505",
 "slug": "mcp-watch-command-injection-vulnerability-cve-2025-66401",
 "title": "MCP Watch Command Injection Vulnerability CVE-2025-66401",
 "summary": "MCP Watch contains a command injection vulnerability in the cloneRepo method due to unsanitized input passed to the system shell. An attacker can execute arbitrary commands on the host machine by exploiting this flaw.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "MCP Watch"
 ],
 "incident_date": "2025-12-01",
 "incident_date_precision": "day",
 "first_reported": "2025-12-01",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66401",
   "publisher": "NVD",
   "title": "CVE-2025-66401: MCP Watch is a comprehensive security scanner for Model Context Protocol (MCP) servers.",
   "published_at": "2025-12-01"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_nvd",
 "tags": [
  "CVE-2025-66401",
  "command_injection",
  "infra_vuln"
 ],
 "created_at": "2026-10-18T10:04:21.885Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}