The vulnerability is located in the PermissionManager.checkShellCommand function of mercury‑agent’s run_command handler. It allows an attacker to cause incorrect privilege assignments during shell command execution. As a result, a remote attacker can elevate privileges beyond the intended scope, potentially compromising system integrity. This weakness is classified under CWE‑266 for improper authority delegation.

CosmicStack‑Labs Mercury Agent versions up to and including 1.1.12 are affected. The flaw resides in the src/capabilities/permissions.ts component of the run_command capability. Users still running these versions are at risk.

The CVSS score of 5.3 indicates a medium severity vulnerability, but because the exploit can be performed remotely and has already been disclosed to the public, the risk remains significant. EPSS data is not available, and the vulnerability is not listed in the CISA KEV catalog, yet the remote nature and public availability of the exploit suggest it may be actively leveraged. The attack likely involves invoking the run_command handler with crafted input to trigger the misassignment of privileges.