This vulnerability in the andreahaku llm_memory_mcp component involves command injection via the argument hash in the auto.capture function of src/autolearn/GitHooksManager.ts. The attack vector is local execution with low complexity and no user interaction required. Due to the lack of versioning in the product, specific affected versions cannot be determined. The vulnerability was reported early to the project, but no fix or official response has been provided. The CVSS 4.0 base score is 4.8, indicating medium severity.

Successful exploitation allows an attacker with local access and low privileges to execute arbitrary commands on the affected system. The impact is limited to local users and does not require user interaction. There is no indication of remote exploitation or widespread active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch is available, users should restrict local access to trusted users only and monitor for suspicious activity related to this component until a fix is released.