CyberRota Analysis
AI-GeneratedFishCodeTech Muteki versions up to 0.2.5 are vulnerable due to an OS command injection flaw in the Default Local Worker Backend component, specifically affecting the .claude/settings.json file. This vulnerability can be exploited remotely, potentially allowing attackers to execute arbitrary commands on the server. Organizations using this software should prioritize remediation efforts, especially given the public disclosure of the exploit and the project's impending shutdown.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A security vulnerability has been detected in FishCodeTech Muteki up to 0.2.5. The affected element is an unknown function of the file .claude/settings.json of the component Default Local Worker Backend. The manipulation leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The issue was closed with the comment (translated from Chinese): "The project will be refactored and shut down."