Description

A vulnerability was identified in abdullah1854 MCPGateway up to 549f494a9e363f40530149de324b8097de424230. This impacts the function getUsageByDateRange of the file src/services/claude-usage.ts of the component Claude Usage Range Endpoint. The manipulation of the argument since leads to command injection. The attack can be initiated remotely. The exploit is publicly available and might be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "6.3",
  "pubDate": "2026-08-08T08:16:51.623Z",
  "pubdate": "2026-08-08T08:16:51.623Z",
  "executiveSummary": "A command injection vulnerability has been identified within the MCPGateway component, specifically affecting the Claude Usage Range Endpoint. The flaw resides in the getUsageByDateRange function located in the src/services/claude-usage.ts file. This security defect impacts versions up to commit 549f494a9e363f40530149de324b8097de424230. The vulnerability allows remote attackers to manipulate the since parameter, resulting in arbitrary command execution on the underlying host operating system. The risk implications are severe, as successful exploitation could lead to complete system compromise, unauthorized data access, and potential lateral movement within the affected network infrastructure. The attack can be executed remotely without prior authentication or elevated privileges, depending on the exposure of the endpoint. An exploit is publicly available, increasing the urgency for defensive measures. The vendor has been notified via an issue report but has not yet provided a response or official patch, complicating dependency management due to the project's continuous delivery model utilizing rolling releases.",
  "technicalDetails": "The vulnerability stems from insufficient input validation and improper neutralization of user-supplied data within the getUsageByDateRange function inside src/services/claude-usage.ts. Specifically, the argument since is passed directly or concatenated unsafely into an underlying system shell execution context, such as a child process invocation (e.g., exec or spawn with shell options enabled). Because the input parameter is not adequately sanitized, parameterized, or escaped before being interpreted by the shell, an attacker can inject malicious shell metacharacters (such as semicolons, pipes, or backticks) to append arbitrary system commands.\nThe attack flow proceeds as follows: First, an unauthenticated remote attacker identifies the exposed Claude Usage Range Endpoint provided by MCPGateway. Second, the attacker crafts a malicious HTTP request containing a payload within the since argument designed to break out of the intended command context and execute arbitrary OS commands. Third, the HTTP request is transmitted across the network to the vulnerable server. Fourth, the MCPGateway application receives the request and routes it to the getUsageByDateRange function in src/services/claude-usage.ts. Fifth, the vulnerable function interpolates the malicious since argument directly into a shell command string without prior sanitization. Sixth, the operating system executes the resulting command string, granting the attacker the execution privileges of the Node.js process running the MCPGateway instance.\nThe affected component is the Claude Usage Range Endpoint, specifically the function getUsageByDateRange in src/services/claude-usage.ts. All commits up to 549f494a9e363f40530149de324b8097de424230 are affected. The vulnerability requires network exposure of the gateway endpoint, can be triggered remotely, and does not require explicit authentication or user interaction. Post-exploitation impact includes arbitrary code execution, reading sensitive environment variables or configuration files, exfiltrating data, and pivoting to internal network resources accessible from the host running MCPGateway."
}