ZDI-26-024: mcp-server-siri-shortcuts shortcutName Command Injection and Privilege Escalation

Vulnerability Key Information Title: (0Day) mcp-server-siri-shortcuts shortcutName Command Injection Privilege Escalation Vulnerability ID: ZDI-26-024 ZDI-CAN-27910 CVE-2026-0758 CVSS Score: 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Affected Vendor: mcp-server-siri-shortcuts Affected Product: mcp-server-siri-shortcuts Vulnerability Details: This vulnerability allows a local attacker to escalate privileges on an affected mcp-server-siri-shortcuts installation. The attacker must first gain the ability to execute low-privilege code on the target system in order to exploit this vulnerability. The specific flaw resides in the parameter. The issue stems from insufficient validation of user-supplied strings prior to system call execution. Attackers can exploit this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Additional Details: 2025-09-23 - ZDI requested vendor PSIRT contact information via GitHub issue 2025-09-23 - Vendor provided contact information 2025-09-24 - ZDI submitted the report to the vendor 2025-11-10 - ZDI requested an update 2025-12-14 - ZDI notified vendor of intent to publish this case as a 0 Day advisory Disclosure Timeline: 2025-09-23 - Vulnerability reported to vendor 2026-01-09 - Coordinated advisory published 2026-01-09 - Advisory updated Mitigation: Given the nature of the vulnerability, the only effective mitigation is to restrict interaction with the product Source: Peter Girnus (@gothburz) and Brandon Niemczyk, Trend Zero Day Initiative

Goal Reached Thanks to every supporter — we hit 100%!

ZDI-26-024: mcp-server-siri-shortcuts shortcutName Command Injection and Privilege Escalation