EUVD-2026-65491
GHSA-w4x2-2pcx-2cpc
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-reachable with low privileges required; scope unchanged; impacts set to Low matching vendor's 4.0 scoring, though CWE-78 typically warrants higher - sandboxing context unconfirmed.
Primary rating from Vendor (VulDB).
CVSS VectorVendor: VulDB
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
4DescriptionCVE.org
A security vulnerability has been detected in FishCodeTech Muteki up to 0.2.5. The affected element is an unknown function of the file .claude/settings.json of the component Default Local Worker Backend. The manipulation leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The issue was closed with the comment (translated from Chinese): "The project will be refactored and shut down."
AnalysisAI
OS command injection in FishCodeTech Muteki up to version 0.2.5 enables remote low-privileged attackers to execute arbitrary operating system commands through unsanitized input handled by the Default Local Worker Backend component, specifically via the application's .claude/settings.json configuration file. Publicly available exploit code (POC) exists, referenced from a dedicated exploit report repository, raising the practical exploitability despite the product's limited deployment footprint. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires low-level privileges (PR:L per CVSS 4.0 vector) - the attacker must have some authenticated or credentialed access to the Muteki application, or the ability to influence the contents of the .claude/settings.json configuration file processed by the Default Local Worker Backend. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 score of 5.3 with low VC/VI/VA impacts is notably lower than what CWE-78 OS command injection typically warrants - a discrepancy that should prompt verification. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker with low-privilege access to the Muteki application - such as an authenticated API user or a user with write access to the application's configuration path - crafts a payload embedding OS command metacharacters into an input field or configuration value processed by the Default Local Worker Backend. The application passes this unsanitized input to a system shell call, executing the injected commands with the privileges of the Muteki process. … |
| Remediation | No vendor-released patch is available and none is expected - the project maintainer closed the vulnerability issue with a statement (translated from Chinese) that the project will be refactored and shut down. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-78 – OS Command Injection
View allSame technique Command Injection
View allShare
External POC / Exploit Code
Leaving vuln.today