This vulnerability in Braffolk mcp-summarization-functions (up to version 0.1.5) involves an OS command injection flaw in the summarize_command component located in src/server/mcp-server.ts. An attacker with local access can manipulate the 'command' argument to execute arbitrary operating system commands. The vendor was notified but did not respond, and no official remediation or patch is currently available. The CVSS 4.0 vector indicates low attack complexity, local attack vector, and no user interaction required.

Successful exploitation allows a local attacker to execute arbitrary OS commands on the affected system, potentially leading to unauthorized actions or system compromise within the scope of the local user privileges. Since the attack requires local access, remote exploitation is not possible. The published exploit increases the risk of exploitation in environments where local access is attainable.

No official fix or patch is currently available from the vendor, and the vendor has not responded to disclosure attempts. Users should restrict local access to trusted users only and consider implementing additional local security controls to limit the ability to manipulate the vulnerable argument. Monitor for any future vendor advisories or patches and apply them promptly once available. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.