The generateChart function in the generateAssets tool of slidev-builder-mcp allows an attacker with local filesystem access to execute arbitrary shell commands by supplying a crafted value for the outputDir argument. The tool concatenates this value into a system command without proper validation, resulting in command injection. The flaw is an OS command injection weakness (CWE‑77) and involves improper handling of user input (CWE‑74). Because the vulnerable code only runs on the local machine, the impact is limited to users who can run the tool on the host and does not enable remote code execution.

The open‑source project slidev-builder-mcp, version 2.1.0, developed by adolfosalasgomez3011, is affected. The vulnerability resides in src/tools/generateAssets.ts within the generateAssets module. No official patch or workaround has been released, and the maintainer has yet to respond.

The CVSS score of 4.8 indicates moderate severity. EPSS is not available and the issue is not listed in the CISA KEV catalog, suggesting no confirmed external exploits. The attack vector requires local access, so the risk is lower in environments with strict user privilege controls or isolated systems. Nonetheless, any host where the tool is installed and accessible to privileged users should be addressed promptly.