CVE-2026-55582 affects mcp-shell, an MCP server for running shell commands securely. Prior to version 0.6.0, the default security.yaml configuration permits /usr/bin/git, while the security.go file fails to include the '!' character in its shell metacharacter and dangerous construct checks. This oversight, combined with no per-executable argument policy, allows an attacker to pass a crafted Git -c alias argument to execute arbitrary OS commands. The exploit leverages Git's alias feature with shell escape syntax (!<command>) to bypass security controls. The default Docker deployment runs as mcpuser with Git installed and secure mode enabled, making it exploitable without additional authentication beyond MCP connectivity. The vulnerability is exploitable in default configurations, raising its risk profile significantly. The issue has been patched in version 0.6.0 of mcp-shell. Users are advised to upgrade immediately to mitigate the risk of arbitrary command execution.