A flaw exists in the Advanced Search Tool component of mcollina's mcp-ripgrep. A local attacker can influence the fileType argument passed to the module's src/index.ts file, causing the tool to construct and execute an OS command without proper escaping. This results in command injection, allowing arbitrary shell commands to run on the host. If exploited, the attacker could gain complete control over the target system, compromising confidentiality, integrity, and availability.

The vulnerability exists in the mcollina mcp-ripgrep package up to and including version 0.4.0. System administrators should verify whether their deployments run this version of the vendor's product and plan updates accordingly.

The CVSS score of 4.8 indicates a moderate severity. The EPSS score of less than 1% signals a very low probability of exploitation in the wild, yet the exploit code has been publicly released, and the issue is classified as an OS command injection. Because the flaw requires a local approach, the attacker must have some local access to the machine; there is no evidence that remote exploitation is possible at this time. The vulnerability is not indexed in the CISA KEV catalog and is not listed as a known exploited vulnerability by official sources.