The severity is LOW as mcp-firewall is a security enhancement and not a patch for an existing vulnerability. It helps prevent unauthorized command execution but does not address a specific exploit.
The advisory discusses mcp-firewall, a CLI tool that applies regex-based policies to control tool use requests. It supports Claude Code and GitHub Copilot CLI through the pretooluse hook. The impact of not applying this tool could be unauthorized access or misuse of commands.
Affected Systems
- Claude Code
- GitHub Copilot CLI
Affected Versions: All versions before integration
Remediation
- Download the latest compiled binary from the releases section of the mcp-firewall GitHub repository.
- Install the tool by adding it to your $PATH environment variable.
- Configure the tool with appropriate policy files in either global or per-project settings.