This vulnerability exists in the MCP Tool component of 54yyyu code-mcp, specifically in the git_operation function of src/code_mcp/server.py. An attacker can remotely trigger command injection by manipulating the operation argument. The product's continuous delivery model means versioning details for affected or patched releases are unavailable. The vendor has not issued an official response or remediation. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges or user interaction required, with low to low impact on confidentiality, integrity, and availability. Public exploit information is available, but no active exploitation is confirmed.

Successful exploitation allows remote attackers to execute arbitrary commands on the affected system, potentially compromising system integrity and confidentiality. The medium severity score reflects the significant but not critical impact, given the low complexity and no required privileges or user interaction. No known active exploitation in the wild has been reported.

No official fix or patch has been released by the vendor as of the current information. Due to the continuous delivery model, users should monitor the project's updates closely for any forthcoming remediation. Until a fix is available, restricting network access to the affected service and applying strict input validation or filtering on the operation argument may reduce risk. Patch status is not yet confirmed — check the vendor advisory or project repository regularly for current remediation guidance.