The weakness resides in the auto.capture function within GitHooksManager.ts and allows an attacker to inject arbitrary shell commands by manipulating the hash argument. Because the function executes the hash value directly, an unauthenticated local user who can supply that argument can cause the system to run any command with the privileges of the process. This can lead to the disclosure of sensitive data, modification of system files, or further privilege escalation. The vulnerability is classified as command injection (CWE‑74) and input misvalidation (CWE‑77).

The affected product is llm_memory_mcp developed by Andreahaku. All releases up to commit f11dc8bcff3ff8cf943a2945f99ff3b0bdc8a6d0 are vulnerable. No versioning schema is used, so the exact impacted versions cannot be enumerated beyond that commit. Users of any tagged version in the repository are potentially affected until a patch is released.

The CVSS score of 4.8 indicates a moderate risk, but because the exploitation is restricted to local execution, the EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog. An attacker must already have local access to the system or the ability to supply the hash argument to invoke the auto.capture function. In the absence of a known fix, the likelihood of exploitation remains low, but local attackers could still commandeer the process. Administrators should treat this as a local command execution risk requiring monitoring and remediation as soon as an update becomes available.