advanced-powershell-mcp

The server executes PowerShell commands constructed using direct string interpolation of user-controlled parameters (e.g., log names, paths, search terms, user/group names, SQL queries, backup paths). This creates a significant risk of PowerShell command injection if an attacker can control or manipulate these inputs. While Zod validates input types, it does not sanitize against PowerShell-specific injection vectors. Many operations require administrator privileges and can perform destructive actions (e.g., formatting disks, deleting registry keys, clearing event logs). The CIS Benchmark tools, for example, build .inf files with interpolated user strings for `secedit` execution, which is a critical injection risk.