CyberRota Analysis
AI-GeneratedA vulnerability exists in the cosmicstack-labs mercury-agent up to version 1.2.0, specifically in the PermissionManager.checkShellCommand function, which could allow local attackers to manipulate permissions and disclose sensitive information. Although the severity is rated low, organizations using this software should prioritize patching due to the public availability of the exploit. Immediate attention is recommended for those managing systems that utilize this component to mitigate potential local attacks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A weakness has been identified in cosmicstack-labs mercury-agent up to 1.2.0. This affects the function PermissionManager.checkShellCommand of the file mercury-agent/src/capabilities/permissions.ts of the component Shell Permission Manifest. Executing a manipulation can lead to information disclosure. The attack is restricted to local execution. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.