lldb-mcp-server

The server exposes powerful LLDB debugging primitives (e.g., lldb.command, lldb.evaluate, lldb.launch, lldb.attach, lldb.readMemory, lldb.writeMemory) over an unauthenticated TCP connection. While default listening is on 127.0.0.1, configurable host/port allows broader network exposure. There are no explicit authentication or fine-grained authorization mechanisms beyond LLDB_MCP_ALLOW_LAUNCH and LLDB_MCP_ALLOW_ATTACH environment variables, which only cover specific process operations and not the arbitrary command/evaluation features. This means any client connecting to the server can execute arbitrary lldb commands, evaluate expressions, and manipulate processes on the host machine, posing a significant privilege escalation and system compromise risk if deployed in an untrusted environment or made network-accessible.