The vulnerability in @pensar/apex (<= 0.0.58) involves unsafe construction of shell commands in the createSmartEnumerateTool() function located in src/core/agent/tools.ts. Unsanitized values from user-controllable inputs (extensions array and url parameter) are concatenated into a command string executed via Node.js child_process.exec(). Because exec() spawns a shell, any shell metacharacters in these inputs are interpreted by the host shell, enabling arbitrary OS command execution with the privileges of the process running the application. The supplier disputes the vulnerability report, claiming the behavior is intended and documented in their security policy. There is no vendor advisory or patch available at this time.

Successful exploitation could allow an attacker to execute arbitrary operating system commands on the host with the privileges of the @pensar/apex process. This can lead to full system compromise depending on the privileges of the running process. The CVSS 3.1 base score is 8.8 (high), reflecting high impact on confidentiality, integrity, and availability, with low attack complexity and no privileges required but requiring user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the supplier disputes this as a vulnerability and no official fix or mitigation is provided, users should carefully review the security policy of the pensarai/apex GitHub repository and consider restricting or sanitizing inputs passed to the smart_enumerate tool. Avoid running the affected versions in high-risk environments until further guidance or patches are available.