This vulnerability exists in the Git Remove MCP Tool component of the 0xshariq github-mcp-server, specifically in the child_process.exec function within src/github.ts. Improper sanitization or validation of the argument passed to this function allows an attacker to perform OS command injection remotely. The project follows a rolling release model, so no fixed or affected versions are explicitly stated. Public exploit code is available, increasing the risk of exploitation. The vendor has been informed but no official fix or advisory has been published.

Successful exploitation of this vulnerability allows remote attackers to execute arbitrary OS commands on the affected system with the privileges of the application. This can lead to unauthorized system access, data compromise, or further attacks. The CVSS 4.0 base score of 5.3 indicates a medium severity impact with network attack vector, low complexity, and no user interaction required.

Patch status is not yet confirmed as the vendor has not responded or released a fix. Users should monitor the vendor's repository and advisories for updates. Until a fix is available, avoid exposing the vulnerable service to untrusted networks or inputs. Consider applying manual input validation or sandboxing measures if feasible.