Back to Home
DAFoam icon

dafoam_mcp_server

by DAFoam

Overview

A conversational MCP server designed to facilitate CFD simulation and optimization for airfoil and wing geometries.

Installation

Run Command
python dafoam_mcp_server.py

Security Notes

CRITICAL VULNERABILITY: The server directly embeds user-provided arguments (e.g., `airfoil_profile`, `mach_number`, `cpu_cores`) into `bash -c` commands via f-strings without proper sanitization. This is a severe command injection vulnerability, allowing arbitrary code execution on the underlying system (or container) if a malicious user provides crafted input. For example, `airfoil_profile='naca0012; rm -rf /'` would execute `rm -rf /`. Additionally, the HTTP server binds to `0.0.0.0` (all network interfaces) to serve generated plot files. While generally less critical for static files, if combined with the command injection, malicious files could be placed in the `plots` directory and served.

Similar Servers

Stats

Interest Score0
Security Score1
Cost ClassLow
Avg Tokens75
Stars0
Forks0
Last Update2025-12-04

Tags

CFDAerodynamicsOptimizationSimulationConversational AIOpenFOAM