The flaw allows a local attacker to inject arbitrary shell commands into the executeCommand routine by manipulating the command or args parameters, which lack proper validation. This results in a command injection vulnerability (CWE‑74 and CWE‑77). Because the command is run with the privileges of the LudusMCP process, successful exploitation could give the attacker the ability to execute any shell command on the host, potentially leading to full system compromise. The impact is confined to environments where an attacker has local access to the host running LudusMCP.

NocteDefensor LudusMCP versions up to 1.0.24 are impacted. The vulnerability resides in the executeCommand function inside src/ludusMCP/cliWrapper.ts. Versions newer than 1.0.24 are presumed not to be affected, but the vendor has not yet issued an explicit confirmation.

The CVSS score of 4.8 denotes moderate severity. EPSS is not available, and the vulnerability is not cataloged in CISA's KEV. The attack vector is local, meaning the attacker must already have privileged or user access to the machine running LudusMCP. Once local execution is achieved, the injection can be used without additional network interaction, making it a risk for systems that expose the command‑line interface to users who might be compromised.