What happened
mcp-ffmpeg through 1.0.5 has an OS command-injection flaw (CVSS 7.0, published 2026-10-27) in its resize-video, extract-audio and get-video-info tools, where attacker-controlled videoPath/outputDir values reach a shell command unneutralized.
Why it matters
Part of the wider MCP command-injection wave: a prompt-injected agent that calls any of these media tools can run shell commands on the host running the MCP server, converting a crafted prompt into host execution.
Attack vector
The resize-video / extract-audio / get-video-info tools interpolate crafted videoPath or outputDir values into a shell command without neutralizing $(), backticks, or a closing double-quote, giving an MCP client or prompt-injected agent arbitrary shell command execution.
Affected systems
mcp-ffmpeg ≤ 1.0.5
Mitigation
Upgrade to a patched mcp-ffmpeg release; sanitize/validate path inputs and avoid shell interpolation for ffmpeg arguments.