Minicode
Monthly
Command injection in LiuMengxuan04 MiniCode 0.1.0 allows a remote attacker to execute arbitrary OS commands with the victim user's privileges by supplying a malicious project-scoped `.mcp.json` file. The `child_process.spawn` call in `mcp.ts` unconditionally loaded MCP server definitions from project-level `.mcp.json` files, meaning any repository under attacker control - or one to which the attacker contributed - could trigger arbitrary command execution when a developer ran MiniCode inside it. A public proof-of-concept exploit exists; an upstream fix (PR #37) gates project MCP config loading behind an opt-in environment variable but has not yet been merged into a released version.
Command injection in LiuMengxuan04 MiniCode 0.1.0 allows a remote attacker to execute arbitrary OS commands with the victim user's privileges by supplying a malicious project-scoped `.mcp.json` file. The `child_process.spawn` call in `mcp.ts` unconditionally loaded MCP server definitions from project-level `.mcp.json` files, meaning any repository under attacker control - or one to which the attacker contributed - could trigger arbitrary command execution when a developer ran MiniCode inside it. A public proof-of-concept exploit exists; an upstream fix (PR #37) gates project MCP config loading behind an opt-in environment variable but has not yet been merged into a released version.