CyberRota Analysis
AI-GeneratedA critical vulnerability exists in the zosmaai pi-llm-wiki component, specifically in the mcp/index.ts file, allowing for remote OS command injection through manipulated URL arguments. This flaw poses a significant risk as it can be exploited by attackers to execute arbitrary commands on the host system. Organizations using versions up to 0.11.7 should prioritize upgrading to version 0.11.8 to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw has been found in zosmaai pi-llm-wiki up to 0.11.7. Affected is an unknown function of the file mcp/index.ts of the component wiki_capture_source MCP tool. Executing a manipulation of the argument url can lead to os command injection. The attack can be executed remotely. The exploit has been published and may be used. Upgrading to version 0.11.8 is able to address this issue. This patch is called 360867034e79175b45c8e04a98e4ca712bbaca35. Upgrading the affected component is advised.