Threats affecting pkg:github/raine/consult-llm-mcp

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.8	EPSS 0.9%	CVE-2026-5125raine consult-llm-mcp · OS Command Injection Medium4.8EPSS 0.9%2026-03-30CVE Database V5CVE-2026-5125 CVE-2026-5125 is an OS command injection vulnerability in the raine consult-llm-mcp software versions up to 2.5.3. The issue occurs in the child_process.execSync function within src/server.ts, where manipulation of the git_diff.base_ref or git_diff.files arguments can lead to command injection. Exploitation requires local access and no user interaction. A public exploit exists. EPSS 0.9%Vulnerability	CVE Database V5	2026-03-30

Page 1 of 1