opcua-mcp

The server allows direct interaction with OPC UA systems, including connecting to arbitrary URLs and reading/writing to arbitrary node IDs, based on client input. While the Python code itself does not contain obvious injection vulnerabilities like `eval`, the lack of input sanitization or access control policies within the server makes it a high-privilege gateway. A compromised MCP client could abuse these capabilities to interact with unauthorized or malicious OPC UA servers or perform unauthorized operations on a connected server. The duplicate call to `node.write_value()` without arguments in the `write_node` function is likely a minor bug but not a security vulnerability.