This vulnerability involves command injection in the ssh_exec function of the ssh-mcp-server component of Kino-Kafkaesque. By manipulating the host or username arguments, a local attacker with some privileges could inject commands. The product is designed as a local/trusted tool for executing commands over SSH, implying that callers already have significant execution rights. The vulnerability's existence is questioned by the maintainer, and no fixed versions or patches are specified due to the continuous delivery model.

If exploitable, this vulnerability could allow a local attacker with limited privileges to execute arbitrary commands via the ssh_exec function by manipulating input arguments. However, since the tool is intended for trusted local use and callers already have meaningful execution capabilities, the practical impact may be limited. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Given the product's intended use as a local trusted tool, ensure that only trusted users have access to the ssh-mcp-server. Monitor vendor communications for any updates or fixes due to the rolling release strategy.