A command injection vulnerability was identified in LeeSinLiang godot-mcp 0.1.0 affecting the executeOperation function in src/index.ts under the create_scene/add_node component. The vulnerability arises from improper handling of the projectPath argument, enabling local attackers to execute arbitrary commands on the system. The issue was reported early to the project but remains unaddressed with no official remediation available. The CVSS 4.0 base score is 4.8, indicating medium severity with local attack vector and low complexity.

Successful exploitation allows a local attacker to execute arbitrary commands on the affected system via manipulation of the projectPath argument. This could lead to unauthorized command execution with the privileges of the vulnerable application. However, exploitation requires local access, limiting the attack surface.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the project has not responded or issued a fix, users should restrict local access to trusted users only and monitor for suspicious activity related to the vulnerable function. Avoid using version 0.1.0 of godot-mcp until a fix is available.