This vulnerability affects the tufantunc ssh-mcp project versions 1.0 through 1.5.0. The issue is in the shell.write function of src/index.ts, where improper handling of the Description argument allows an attacker with local access and low privileges to perform command injection. The vulnerability does not require user interaction but does require local access. The vulnerability was reported early to the project but remains unaddressed as of the publication date. No official patch or remediation guidance is currently available.

Successful exploitation allows a local attacker with low privileges to execute arbitrary commands on the affected system, potentially leading to elevated impact on confidentiality, integrity, and availability as indicated by the CVSS vector. Since the attack requires local access, remote exploitation is not possible. No known exploits in the wild have been reported yet.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or issued a fix, users should restrict local access to trusted users only and monitor for suspicious activity related to ssh-mcp usage. Avoid running ssh-mcp on untrusted systems or with untrusted users until a fix is available.