unity-mcp-server

Security Findings (113)

• CriticalAS-006

  💻Arbitrary Code Execution

  heuristic signal

  unity_execute_code:tool name or description implies arbitrary script/code execution (evaluate_script, execute javascript, etc.)

  Fix: This tool can execute arbitrary code or shell commands on the host system. Remove it unless strictly required. If kept: (1) restrict access to trusted users/agents only, (2) require human approval before each invocation (Claude Desktop: set approval_required: true; other clients: enable equivalent confirmation), (3) use the most restrictive sandbox or read-only mode available, and (4) never expose this tool to untrusted input sources.

• LowAS-011

  ℹ️Missing Rate-Limit / Timeout ×11

  tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration

  unity_hub_available_releasesunity_execute_codeunity_execute_menu_itemunity_search_by_componentunity_search_by_tagunity_search_by_layerunity_search_by_nameunity_search_assetsunity_search_missing_referencesunity_packages_searchunity_advanced_tool

  Fix: Declare explicit rate-limit, timeout, and retry configuration for all network and execution tools. Implement exponential back-off and surface resource state to the calling agent.

• InfoAS-014

  ℹ️Dependency Inventory Unavailable ×80

  Tool did not expose metadata.dependencies or repo_url, so supply-chain coverage is limited.

  unity_list_instancesunity_select_instanceunity_hub_list_editorsunity_hub_install_editorunity_hub_available_releasesunity_hub_install_modulesunity_hub_get_install_pathunity_hub_set_install_pathunity_editor_pingunity_editor_stateunity_project_infounity_scene_infounity_scene_hierarchyunity_scene_openunity_scene_saveunity_scene_newunity_scene_statsunity_gameobject_createunity_gameobject_deleteunity_gameobject_infounity_gameobject_set_transformunity_gameobject_duplicateunity_gameobject_set_activeunity_gameobject_reparentunity_component_addunity_component_removeunity_component_get_propertiesunity_component_set_propertyunity_component_set_referenceunity_component_batch_wireunity_component_get_referenceableunity_asset_listunity_asset_importunity_asset_deleteunity_asset_create_prefabunity_asset_instantiate_prefabunity_script_createunity_script_readunity_script_updateunity_execute_codeunity_material_createunity_renderer_set_materialunity_buildunity_play_modeunity_console_logunity_console_clearunity_get_compilation_errorsunity_execute_menu_itemunity_undounity_undo_lastunity_redounity_undo_historyunity_selection_getunity_selection_setunity_selection_focus_scene_viewunity_selection_find_by_typeunity_search_by_componentunity_search_by_tagunity_search_by_layerunity_search_by_nameunity_search_assetsunity_search_missing_referencesunity_screenshot_gameunity_screenshot_sceneunity_screenshot_editor_windowunity_graphics_scene_captureunity_graphics_game_captureunity_prefab_infounity_set_object_referenceunity_packages_listunity_packages_addunity_packages_removeunity_packages_searchunity_packages_infounity_queue_infounity_agents_listunity_agent_logunity_list_advanced_toolsunity_advanced_toolunity_get_project_context

  Fix: Review and remediate the identified issue.

• InfoAS-002

  ⚠️Excessive Permissions ×21

  declared capabilities: network access

  unity_hub_available_releasesunity_search_by_componentunity_search_by_tagunity_search_by_layerunity_search_by_nameunity_search_assetsunity_search_missing_referencesunity_packages_search

  declared capabilities: filesystem access

  unity_gameobject_createunity_gameobject_deleteunity_component_removeunity_asset_importunity_asset_deleteunity_asset_create_prefabunity_script_createunity_script_updateunity_material_createunity_packages_remove

  declared capabilities: code/command execution

  unity_execute_codeunity_execute_menu_itemunity_advanced_tool

  Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.