Slidev Builder Mcp
Monthly
Command injection in slidev-builder-mcp 2.1.0 allows local low-privilege users to execute arbitrary OS commands by passing shell metacharacters in the `outputDir` argument to the `generateChart` function of the generateAssets Tool. The attack is confined to local access only (CVSS 4.0 AV:L), and the CVSS 4.0 E:P modifier confirms publicly available proof-of-concept code exists. No vendor patch has been released as the project has not responded to the disclosure; no confirmed active exploitation (not in CISA KEV) has been identified at time of analysis.
Command injection in slidev-builder-mcp 2.1.0 allows local low-privilege users to execute arbitrary OS commands by passing shell metacharacters in the `outputDir` argument to the `generateChart` function of the generateAssets Tool. The attack is confined to local access only (CVSS 4.0 AV:L), and the CVSS 4.0 E:P modifier confirms publicly available proof-of-concept code exists. No vendor patch has been released as the project has not responded to the disclosure; no confirmed active exploitation (not in CISA KEV) has been identified at time of analysis.