| शीर्षक | QUSETIONS MiniCode-Python v0.1.0 54d47f3 OS Command Injection |
|---|
| विवरण | MiniCode-Python is an AI-powered coding assistant. Its MCP (Model Context Protocol) server integration allows an attacker to achieve code execution by placing a malicious .mcp.json configuration file in the root of a project.
When a victim clones or downloads the project and launches MiniCode-Python inside it, project-scoped MCP servers from .mcp.json are loaded automatically. During tool registry creation, MiniCode-Python attempts to connect to the configured MCP server, which spawns the configured command via subprocess.Popen() with the victim's full process environment inherited.Although the Python implementation contains a command allowlist, the allowlist includes general-purpose interpreters and package runners such as python, python3, node, npx, etc. A malicious project can therefore configure an allowed interpreter, such as python, and pass it an attacker-controlled script stored in the repository. That script can then execute arbitrary local commands.No MCP-specific permission prompt, trust prompt, or user confirmation is shown before the process is spawned. |
|---|
| स्रोत | ⚠️ https://gist.github.com/menelausx/2e6275222cb2e8aa412a145ba7abec66 |
|---|
| उपयोगकर्ता | JasperX (UID 97281) |
|---|
| सबमिशन | 16/06/2026 03:06 PM (3 महीनों पहले) |
|---|
| संयम | 21/07/2026 05:49 PM (1 month later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 380945 [QUSETIONS MiniCode-Python 0.1.0 Project File minicode/config.py subprocess.Popen अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|