mcp-server-semgrep version 1.0.0 contains a command injection vulnerability in multiple functions of the MCP Interface component. The flaw allows remote attackers to execute arbitrary OS commands by manipulating the argument ID. This vulnerability is addressed in version 1.0.1.