The vulnerability resides in the @apostrophecms/cli package where the apos create command incorporates user-supplied password input directly into a shell command without sanitization. This flaw is a classic command injection (CWE‑78) that could let an attacker run arbitrary shell commands on the server hosting the CMS. If an attacker can trigger the password prompt, they could potentially gain full system compromise, affecting confidentiality, integrity, and availability.

ApostropheCMS, specifically the @apostrophecms/cli component, in all releases up to and including 3.6.0. The issue impacts Node.js environments where the CLI is used to initialize new sites.

The published CVSS score of 6.5 reflects a moderate severity, but being a command‑level injection, the real damage potential is high if the CLI is exposed. EPSS below 1% indicates that exploitation is considered unlikely currently, yet the flaw exists and is not in the KEV catalog. Based on the description, it is inferred that because the input is taken from a password prompt, the attack vector is local or remote depending on who can supply the input; for remote systems the exposure requires the attacker to have some ability to invoke the CLI, which may be restricted but still poses a risk if privilege escalation is possible.