This vulnerability involves command injection in the ssh_exec function within the src/index.ts file of the ssh-mcp-server component of Kino-Kafkaesque. Manipulating the host or username arguments can lead to command injection. The attack requires local access, and the product is designed as a local/trusted tool for executing commands over SSH. Due to the rolling release strategy, no specific affected versions are identified. The maintainer notes that the threat model assumes trusted local use, which may limit practical exploitation. No patch or official remediation level is provided, and the vulnerability's actual existence is uncertain.

If exploited, this vulnerability could allow an attacker with local access to execute arbitrary commands on the system via the ssh-mcp-server. However, the threat model assumes that users already have meaningful execution capabilities through the exposed shell, which may reduce the practical impact. There are no known exploits in the wild. The medium CVSS score reflects the local attack vector and limited impact scope.

No official patch or remediation guidance is currently available. The vendor has not confirmed the vulnerability's existence and emphasizes the local trusted usage model of the product. Users should follow vendor advisories for updates. Since the product is not a cloud service, remediation depends on vendor updates or configuration changes, if any are provided in the future.