A flaw has been found in versions of 0xshariq github‑mcp‑server where the child_process.exec function in src/github.ts accepts a File parameter that can be constructed by an attacker. This allows arbitrary OS command injection, giving the attacker the ability to execute any shell command on the host. The vulnerability is exploitable by remote actors and (based on the description, it is inferred that it can lead to full compromise of the affected system, enabling data exfiltration, modification or destruction).

The affected product is the Git Remove MCP Tool maintained under the 0xshariq github‑mcp‑server repository. All deployments that use any unreleased commit up to the vulnerable hash 52e764a7d66eac1726fce02ca7bb5a638571801a are susceptible. Because the project follows a rolling release, affected releases are not published, and the project has yet to respond to the issue.

The CVSS score is 5.3, indicating a moderate level of severity, and the EPSS score is 1%. Since the vulnerability is publicly documented and exploitable via remote input, the risk may be higher when the tool is exposed to the internet or untrusted users. (Based on the description, the risk is amplified in such scenarios). The feature is not listed in the CISA KEV catalog, but the lack of output from the project suggests a potential window for exploitation.