csinexus/mcpshield

PoC

Drop-in fix for the unpatched MCP STDIO command-injection flaw (CVE-2026-30623 family)

view exploit source poc_in_githubauthor csinexuspublished 2026-07-21catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-30623US	—	5.00% (92nd)	Exploit	2026-07-15
LiteLLM 1.18.10 contains a remote code execution vulnerability in its MCP server creation functionality. The application allows users to add MCP servers via a JSON configuration sp…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.