This vulnerability in wezterm-mcp 0.1.0 arises from an OS command injection flaw in an unknown function within src/wezterm_executor.ts related to switching or writing to a specific pane. Manipulating the pane_id argument allows an attacker to execute arbitrary OS commands remotely. The issue was responsibly disclosed early to the project, but no fix or official remediation has been provided. The vulnerability has a CVSS 4.0 score of 5.3, reflecting medium severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed.

Successful exploitation allows remote attackers to execute arbitrary operating system commands on the affected system with limited privileges. This can lead to unauthorized command execution, potentially compromising system integrity or confidentiality depending on the environment. There are no confirmed reports of exploitation in the wild, but public exploit code exists.

No official patch or remediation is currently available from the vendor. Users should monitor the vendor’s communications for updates. Until a fix is released, consider restricting network access to the vulnerable component and applying compensating controls to limit exposure. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.