A local command injection flaw resides in the executeOperation function of the create_scene/add_node component of LeeSinLiang godot‑mcp. By manipulating the projectPath argument, an attacker can inject arbitrary shell commands that are executed within the context of the local user. The flaw is identified as CWE‑74 and CWE‑77. The possible impact is that a malicious user who can supply a projectPath value may compromise the local system, alter files, or exfiltrate data.

The vulnerability affects the open‑source godot‑mcp package version 0.1.0 maintained by LeeSinLiang. Any installation that imports or uses the create_scene/add_node module is potentially exposed. Since this is a library component, the impact is limited to deployments of the package where the executeOperation function is invoked, and it requires local file access.

The CVSS score of 4.8 indicates a moderate severity, and the absence of an EPSS or KEV entry suggests that the vulnerability is not currently being exploited in the wild. Exploitation requires local access or interaction with the godot‑mcp codebase; remote attackers cannot trigger it. Therefore, the risk is moderate but confined to users with local control over the application environment.