The affected component is the wiki_capture_source MCP tool in zosmaai pi-llm-wiki. An input‑validation flaw in the URL argument of the mcp/index.ts file allows a remote attacker to inject and execute arbitrary operating‑system commands with the privileges of the running process. Successful exploitation would compromise confidentiality, integrity, and availability of the affected system by permitting full code execution on the host.

The vulnerability exists in versions of zosmaai pi-llm-wiki up to and including 0.11.7. The patch that mitigates the issue is released in version 0.11.8. No other affected versions are listed. The contributor identified the flaw in the wiki_capture_source MCP tool.

The CVSS score of 9.4 places this flaw in the Critical range, and the exploit is publicly available, indicating a high likelihood of use. EPSS is 2%, indicating a low but nonzero probability of exploitation; however, the lack of a KEV listing does not diminish the risk, as the remote attack can be launched without authentication. The attacker only needs to craft a malicious URL to trigger the injection, making the threat highly actionable and immediate.