This vulnerability in andreahaku codex_mcp allows a local attacker to perform command injection via manipulation of the 'model' argument in an unknown function within src/codex-process-simple.ts. Due to the lack of versioning in the product, specific affected versions cannot be determined. The vulnerability was responsibly disclosed but remains unpatched as of the publication date.

An attacker with local access can exploit this vulnerability to execute arbitrary commands on the affected system with the privileges of the running process. This may lead to unauthorized command execution and potential system compromise. The medium CVSS score reflects the local attack vector and required privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should restrict local access to trusted users only and monitor for suspicious activity related to the affected component until an official fix is available.