AgentDeskAI browser-tools-mcp versions up to 1.2.0 contain a flaw in the browser-tools-server/browser-connector.ts file. The code performs unvalidated processing of input that allows an attacker to manipulate the file and execute operating‑system commands. The vulnerability can be triggered remotely and a published exploit is available. Successful exploitation would result in remote command execution on the host running the component. The flaw is classified under CWE‑77 and CWE‑78.

AgentDeskAI’s browser-tools-mcp package, specifically any deployment of the browser-tools-mcp component no newer than version 1.2.0. No further sub‑product or version details are available beyond the overall package name.

The CVSS score of 6.9 places the flaw in the high‑to‑moderate severity range, meaning a successful exploit would grant the attacker full control over system commands. An EPSS score of 2% indicates a low but non‑negligible exploitation probability; attacks remain uncommon, but the presence of a publicly available exploit introduces a real threat. Because the vulnerability can be triggered from remote connections, the risk remains significant until a patch is applied or mitigated. The lack of a KEV listing indicates that the vulnerability is not actively tracked as a high‑profile threat, but it still warrants timely action.