This vulnerability in GH05TCREW PentestAgent up to commit cf882dabea3ed91cef016cdd115e5426315665a2 allows remote OS command injection via the run_task function in interface/main.py of the MCP HTTP Server component. The vulnerability arises from improper input handling leading to command injection. The product's rolling release strategy prevents precise version identification. A patch pull request exists but has not yet been merged. Public exploit code is available.

Successful exploitation enables remote attackers to execute arbitrary operating system commands on the affected system, potentially leading to system compromise. The vulnerability has a CVSS 4.0 base score of 6.9 (medium severity) with network attack vector, low complexity, no privileges or user interaction required, and limited confidentiality, integrity, and availability impacts. No active exploitation in the wild is currently known.

A patch addressing this vulnerability has been developed but is awaiting acceptance. Users should monitor the vendor's repository or advisory channels for the official fix and apply it promptly once available. Until then, no official workaround or mitigation is documented. Due to the rolling release model, ensure the PentestAgent is updated regularly to incorporate security fixes once merged.