CyberRota Analysis
AI-GeneratedThe vulnerability affects the ask MCP Tool within the F5 products, specifically in the src/codex-process-simple.ts file, where improper handling of the model argument can lead to command injection. This issue requires local access to exploit, potentially allowing an attacker to execute arbitrary commands on the affected system. Organizations using the F5 products should prioritize addressing this vulnerability to mitigate the risk of local exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was found in andreahaku codex_mcp up to 1ff521cc6cc57cfe56ddef946c644b8534771390. The affected element is an unknown function of the file src/codex-process-simple.ts of the component ask MCP Tool. The manipulation of the argument model results in command injection. The attack requires a local approach. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The project was informed of the problem early through an issue report but has not responded yet.