This vulnerability in tufantunc ssh-mcp (up to version 1.5.0) arises from improper handling of input in the shell.write function within src/index.ts. Specifically, the Description argument can be manipulated to perform command injection, classified under CWE-77 and CWE-74. The attack vector is local with low attack complexity and requires low privileges but no user interaction. The vulnerability has a CVSS 4.0 score of 8.5, indicating high impact on confidentiality, integrity, and availability. Although publicly disclosed, no vendor fix or advisory has been published to date.

Successful exploitation allows a local attacker to execute arbitrary commands on the affected system, potentially leading to full compromise of confidentiality, integrity, and availability of the system running ssh-mcp. Since the attack requires local access, remote exploitation is not possible without prior access. The public disclosure of the exploit increases the risk of exploitation in unpatched environments.

No official patch or remediation is currently available from the vendor. Users should restrict local access to trusted personnel only and monitor for suspicious activity related to ssh-mcp usage. Stay alert for vendor advisories or updates that may provide a fix. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.