InternLM MindSearch version 0.1.0 contains a flaw in the ExecutionAction.run method within the Planner Agent component. The function accepts an argument named inputs that can be manipulated to inject arbitrary code. When the input is processed, the injected code is executed, allowing an attacker to run arbitrary commands on the system. The vulnerability is a classic code injection problem exposing the application to total compromise of confidentiality, integrity, and availability through remote execution.

InternLM MindSearch 0.1.0 is affected. No other product or version information is listed. The vulnerability exists in the Planner Agent portion of the MindSearch system.

The flaw is rated with a CVSS score of 10, indicating the highest severity. The EPSS score is not disclosed, but the public disclosure and the statement that the attack can be initiated remotely indicate a high likelihood of exploitation. The vulnerability is not yet indexed in CISA's KEV catalog, yet its remote code execution nature warrants immediate attention. Attackers can exploit the flaw by sending crafted inputs to the Planner Agent from a remote location, enabling code execution without additional privileges.