This vulnerability in 0-Gaurav-0 nexus-mcp involves command injection via the url argument passed to child_process.exec in the src/auth/browser.ts file of the nexus_reauth MCP tool. Remote attackers can manipulate this argument to execute arbitrary commands on the affected system. The product's rolling release model means no fixed or affected versions are explicitly stated. The issue was reported early to the project, but no response or fix has been provided. Exploit code is publicly available, increasing the risk of exploitation.

Successful exploitation allows remote attackers to execute arbitrary commands on the system running the nexus-mcp tool, potentially leading to system compromise or unauthorized actions. The medium CVSS score reflects moderate impact with low attack complexity and no required user interaction. Since the exploit is public, the risk of exploitation is elevated despite no confirmed active attacks in the wild.

No official fix or patch is currently available, and the vendor has not responded to the issue report. Users should monitor the vendor's communications for updates. Until a fix is released, consider restricting network access to the affected component and applying other environment-specific mitigations to reduce exposure. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.