The vulnerability exists in the createSmartEnumerateTool() function within src/core/agent/tools.ts of @pensar/apex (<= 0.0.58). This function constructs a shell command by concatenating unsanitized values from the extensions array and url parameter into a string passed to Node.js child_process.exec(). Because exec() spawns a shell, shell metacharacters in these inputs are interpreted by the host shell, enabling arbitrary OS command execution with the privileges of the process running the tool. The CVSS 3.1 base score is 8.8, indicating high severity, with attack vector network, low attack complexity, no privileges required, user interaction required, and high impact on confidentiality, integrity, and availability.

Successful exploitation allows an attacker to execute arbitrary operating system commands on the host with the privileges of the running process. This can lead to full compromise of the affected system, including unauthorized data access, modification, or destruction. The vulnerability does not require prior privileges but does require user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid using vulnerable versions of @pensar/apex (<= 0.0.58) or restrict access to the smart_enumerate tool to trusted users only. Do not pass untrusted input to the smart_enumerate tool parameters. Monitor vendor channels for updates and apply patches promptly once released.