jmeter-mcp-server

The server uses 'child_process.exec' to run Docker commands, directly embedding user-controlled 'jmxFile' names into shell commands executed within a Docker container. Although 'fileWriter.cleanFilename' is used during JMX creation, it is not explicitly reapplied when 'execute_jmeter_script' receives a JMX file name as input. A malicious JMX file, if executed, could potentially exploit the Docker environment (e.g., via OS Process Samplers or Groovy scripts) to interact with mounted host volumes ('./output', './sample_data', './jmeter-results'), leading to arbitrary code execution or data exfiltration on the host machine. Additionally, the HTTP transport mode uses 'Access-Control-Allow-Origin: *', which is a broad CORS policy that can increase the attack surface if the server is exposed publicly without proper authentication or origin restrictions.