Muteki
Monthly
OS command injection in FishCodeTech Muteki up to version 0.2.5 enables remote low-privileged attackers to execute arbitrary operating system commands through unsanitized input handled by the Default Local Worker Backend component, specifically via the application's .claude/settings.json configuration file. Publicly available exploit code (POC) exists, referenced from a dedicated exploit report repository, raising the practical exploitability despite the product's limited deployment footprint. The project maintainer closed the issue without a patch, announcing that Muteki will be refactored and shut down, making this effectively an unpatched, end-of-life vulnerability with no vendor remediation path. No public exploit identified at time of analysis as confirmed active exploitation by CISA KEV.
OS command injection in FishCodeTech Muteki up to version 0.2.5 enables remote low-privileged attackers to execute arbitrary operating system commands through unsanitized input handled by the Default Local Worker Backend component, specifically via the application's .claude/settings.json configuration file. Publicly available exploit code (POC) exists, referenced from a dedicated exploit report repository, raising the practical exploitability despite the product's limited deployment footprint. The project maintainer closed the issue without a patch, announcing that Muteki will be refactored and shut down, making this effectively an unpatched, end-of-life vulnerability with no vendor remediation path. No public exploit identified at time of analysis as confirmed active exploitation by CISA KEV.