This vulnerability exists in privsim mcp-test-runner 0.2.0 within the MCP Interface component's src/index.ts file, specifically in the child_process.spawn function. Improper sanitization or validation of the command argument allows an attacker to inject arbitrary OS commands remotely. The vulnerability has been publicly disclosed and exploit code is available, increasing the risk of exploitation. No official patch or remediation guidance has been provided by the vendor as of the publication date.

Successful exploitation could allow an attacker to execute arbitrary operating system commands on the affected system remotely with limited privileges. This could lead to unauthorized actions depending on the privileges of the mcp-test-runner process. The availability of public exploit code increases the likelihood of attacks, although no known exploits in the wild have been reported yet.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should consider applying workarounds such as restricting network access to the vulnerable component or running it with minimal privileges until an official patch is available. Monitor vendor channels for updates and apply patches promptly once released.