Environment variable injection

AI security governance · MCP security

Severity

high

What it is

Environment variable values contain shell metacharacters that could be injected into commands.

How Igris detects it

Igris's Command Injection Detector flags this during MCP security scans of your configuration.

References

Related MCP security rules

Secure your AI estate with Igris