CyberRota Analysis
AI-GeneratedA command injection vulnerability exists in the load_pdf function of MIMICLab mcp-pdf-vision 1.1.0, allowing local attackers to manipulate the pdfPath/sessionId argument. This could lead to unauthorized command execution within the affected environment. Organizations using this software should prioritize remediation to mitigate potential local exploitation risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was identified in MIMICLab mcp-pdf-vision 1.1.0. The impacted element is the function load_pdf of the file src/index.ts. Such manipulation of the argument pdfPath/sessionId leads to command injection. The attack can only be performed from a local environment. The project was informed of the problem early through an issue report but has not responded yet.