A flaw in the registerXcodeTools function of the run_lldb component causes unfiltered user data to be fed directly to the operating system’s shell, enabling a classic command‑injection weakness (CWE‑74 and CWE‑77). An attacker can supply crafted arguments that will be executed as shell commands on the host running the service. The service accepts requests over the network, so the exploitation can occur remotely without local privileges, allowing arbitrary command execution, data exfiltration, or further system compromise.

The vulnerability impacts the r‑huijts xcode-mcp-server service, specifically its run_lldb component. All builds derived from the internal commit archive up to f3419f00117aa9949e326f78cc940166c88f18cb are affected. Because the project follows a rolling‑release model, exact release numbers are not defined; the only reliable marker of a vulnerable state is the insecure commit hash noted in the advisory.

The CVSS score of 5.3 denotes moderate severity, while the EPSS score of 3% indicates a relatively low current exploitation probability. The issue is not listed in the CISA KEV catalog. Exploitation requires only that an attacker can send crafted requests to the run_lldb component over the network; no additional authentication or privilege escalation is required by the description.