Pi Llm Wiki
Monthly
OS command injection in zosmaai's pi-llm-wiki through 0.11.7 lets an attacker who can invoke the wiki_capture_source MCP tool run arbitrary operating-system commands on the host by manipulating the tool's url argument, which is passed unsanitized into a shell command used for source extraction. Publicly available exploit code exists (referenced in the project's issue tracker), and the flaw is fixed in version 0.11.8; there is no indication of confirmed active exploitation in CISA KEV. The CVSS v4.0 score is 8.6 (with an assessed CVSS v3.1 equivalent of 8.8), reflecting high confidentiality, integrity, and availability impact, though the vector requires authorized tool access (PR:L) and real-world risk is bounded by the project's very small deployment footprint and whether the MCP tool endpoint is remotely reachable.
OS command injection in zosmaai's pi-llm-wiki through 0.11.7 lets an attacker who can invoke the wiki_capture_source MCP tool run arbitrary operating-system commands on the host by manipulating the tool's url argument, which is passed unsanitized into a shell command used for source extraction. Publicly available exploit code exists (referenced in the project's issue tracker), and the flaw is fixed in version 0.11.8; there is no indication of confirmed active exploitation in CISA KEV. The CVSS v4.0 score is 8.6 (with an assessed CVSS v3.1 equivalent of 8.8), reflecting high confidentiality, integrity, and availability impact, though the vector requires authorized tool access (PR:L) and real-world risk is bounded by the project's very small deployment footprint and whether the MCP tool endpoint is remotely reachable.