Mcp Ripgrep
Monthly
OS command injection in mcollina mcp-ripgrep through 0.4.0 lets a local, low-privilege user who can control the Advanced Search Tool's fileType argument run arbitrary shell commands with the MCP server's privileges. Publicly available exploit code exists, and the finding is disputed by the maintainer as documented shell-execution behavior; no CISA KEV active-exploitation confirmation is present. Real-world priority is low-to-moderate because the attack is strictly local and depends on untrusted input reaching fileType.
OS command injection in mcollina mcp-ripgrep through 0.4.0 lets a local, low-privilege user who can control the Advanced Search Tool's fileType argument run arbitrary shell commands with the MCP server's privileges. Publicly available exploit code exists, and the finding is disputed by the maintainer as documented shell-execution behavior; no CISA KEV active-exploitation confirmation is present. Real-world priority is low-to-moderate because the attack is strictly local and depends on untrusted input reaching fileType.