The mcp-pdf-vision library's load_pdf function accepts a pdfPath or sessionId argument that can be crafted to inject shell commands when invoked in a local environment. This flaw permits an attacker who can execute code on the host to run arbitrary shell commands, thereby compromising the system. The weakness is categorized by CWE-74 (Command Injection) and CWE-77 (Improper Neutralization of Special Elements used in a Command). The CVSS score of 4.8 reflects moderate severity for a local exploit, while the EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog.

Affected systems are deployments that include MIMICLab's mcp-pdf-vision version 1.1.0 and call the load_pdf function from a locally executed context. Any environment where the library is used locally and the function is exposed is considered vulnerable; no other versions have been confirmed to contain the flaw.

Risk and exploitability: The attack is local only, meaning the adversary must be able to run code on the host that invokes the library. The impact is limited to the privileges of the process calling load_pdf. If that process is run with elevated rights, a local attacker can potentially take full control of the host. The absence of an EPSS score and the lack of listing in KEV suggest that exploitation has not yet been widely witnessed, but the command injection flaw still requires cautious handling.