CVE-2026-5125: OS Command Injection in raine consult-llm-mcp
CVE-2026-5125 is an OS command injection vulnerability in the raine consult-llm-mcp software versions up to 2. 5. 3. The issue occurs in the child_process. execSync function within src/server. ts, where manipulation of the git_diff. base_ref or git_diff. files arguments can lead to command injection. Exploitation requires local access and no user interaction. A public exploit exists.
AI Analysis
Technical Summary
This vulnerability in raine consult-llm-mcp (<= 2.5.3) involves improper handling of input arguments (git_diff.base_ref and git_diff.files) passed to the child_process.execSync function in src/server.ts, enabling OS command injection. The attack vector requires local access with low privileges and no user interaction. The vendor fixed the issue in version 2.5.4, with the patch identified by commit 4abf297b34e5e8a9cb364b35f52c5f0ca1d599d3.
Potential Impact
Successful exploitation allows an attacker with local access and low privileges to execute arbitrary OS commands on the affected system. This can lead to unauthorized command execution, potentially compromising system integrity or confidentiality. The CVSS 4.8 (medium) reflects the limited attack vector (local) and required privileges.
Mitigation Recommendations
Upgrade raine consult-llm-mcp to version 2.5.4 or later, which contains the official fix for this vulnerability. This is the recommended and effective remediation. No other mitigations are indicated by the vendor advisory.
CVE-2026-5125: OS Command Injection in raine consult-llm-mcp
Description
CVE-2026-5125 is an OS command injection vulnerability in the raine consult-llm-mcp software versions up to 2. 5. 3. The issue occurs in the child_process. execSync function within src/server. ts, where manipulation of the git_diff. base_ref or git_diff. files arguments can lead to command injection. Exploitation requires local access and no user interaction. A public exploit exists.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability in raine consult-llm-mcp (<= 2.5.3) involves improper handling of input arguments (git_diff.base_ref and git_diff.files) passed to the child_process.execSync function in src/server.ts, enabling OS command injection. The attack vector requires local access with low privileges and no user interaction. The vendor fixed the issue in version 2.5.4, with the patch identified by commit 4abf297b34e5e8a9cb364b35f52c5f0ca1d599d3.
Potential Impact
Successful exploitation allows an attacker with local access and low privileges to execute arbitrary OS commands on the affected system. This can lead to unauthorized command execution, potentially compromising system integrity or confidentiality. The CVSS 4.8 (medium) reflects the limited attack vector (local) and required privileges.
Mitigation Recommendations
Upgrade raine consult-llm-mcp to version 2.5.4 or later, which contains the official fix for this vulnerability. This is the recommended and effective remediation. No other mitigations are indicated by the vendor advisory.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-03-30T07:55:02.890Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 69cacae6e6bfc5ba1d5fd380
Added to database: 3/30/2026, 7:11:34 PM
Last enriched: 4/7/2026, 10:51:31 AM
Last updated: 5/15/2026, 12:00:50 AM
Views: 104
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.