A flaw in MiniCode 0.1.0 allows an attacker to inject arbitrary shell commands via the child_process.spawn function used in the mcp.ts module. The vulnerability is exercised when untrusted input is passed directly to the spawn call without proper sanitization, enabling remote attackers to execute any command on the host operating system. The description notes that launching the attack can be done remotely but requires a high level of complexity, and an exploit has already been published, indicating that the flaw can be triggered in practice.

The affected product is LiuMengxuan04 MiniCode version 0.1.0. The listed CPE indicates the same version and product. No other versions are mentioned as affected.

The CVSS base score of 2.3 classifies this issue as low severity, and the EPSS score of less than 1% suggests a very low probability of exploitation at the time of this analysis. However, because the exploit is available and the vulnerability allows remote command injection, a successful attack would grant the attacker complete control over the MiniCode server, compromising confidentiality, integrity, and availability. The flaw is not listed in CISA’s KEV catalog, but the presence of a published exploit and the remote attack vector increase the concern for any deployment of MiniCode 0.1.0.