Still OS — Security Advisories

Still OS MCP Supply-Chain Security Research · 3 published CVEs · credited to Still OS Digital Holdings LLC

→ Check your own MCP server, free or scan a whole manifest via API →

CVE-2026-106763 ASSIGNED

@justice8096/sagemath-mcp-server@1.0.1

A remote attacker can execute arbitrary code by supplying a crafted MCP tool-call argument that reaches a local shell invocation.

CVE-2026-106764 ASSIGNED

@rog0x/mcp-git-tools@1.0.1

A remote attacker can execute arbitrary code by supplying a crafted MCP tool-call argument that is interpolated into a shell command.

CVE-2026-106765 ASSIGNED (product correction in progress with MITRE)

@rog0x/mcp-docker-tools@1.0.1

A remote attacker can execute arbitrary code by supplying a crafted MCP tool-call argument that is appended to a shell command.

These are independent security findings reported through MITRE and published to their public CVE catalog. Affected a package below? Reach us →
Want this pipeline run against your own MCP server? MCP security audit →
The same research, at ecosystem scale: our MCP trust board →
Disclosure policy · CSAF 2.0 feed (machine-readable advisories)
Still OS Digital Holdings LLC · security@stillosdigitalholdings.com