Threats tagged 'ghsa-7r57-3gj8-p8fr'

A vulnerability in privsim mcp-test-runner version 0.2.0 allows remote attackers to perform OS command injection via manipulation of the command argument in the child_process.spawn function within the MCP Interface component. The issue has a medium severity CVSS score of 6.3 and public exploit code is available. The project has been informed but has not yet responded or issued a fix.