CVE-2026-5125 Details
Description
A vulnerability was detected in raine consult-llm-mcp up to 2.5.3. Affected by this vulnerability is the function child_process.execSync of the file src/server.ts. The manipulation of the argument git_diff.base_ref/git_diff.files results in os command injection. The attack is only possible with local access. The exploit is now public and may be used. Upgrading to version 2.5.4 addresses this issue. The patch is identified as 4abf297b34e5e8a9cb364b35f52c5f0ca1d599d3. Upgrading the affected component is recommended.
A command injection vulnerability exists in Raine Consult-LLM-MCP versions through 2.5.3. The issue arises in the 'consult_llm' tool, where user-controlled input in the 'git_diff.base_ref' and 'git_diff.files' parameters is improperly sanitized. This allows for the injection of arbitrary commands, executed with the same privileges as the MCP server process. The vulnerability is triggered by exploiting the 'child_process.execSync' function in 'src/server.ts', which executes commands through a system shell, interpreting special characters as command modifiers. The flaw has been addressed in version 2.5.4, which rewrites the git command handling to use Rust's 'std::process::Command', eliminating the risk of injection by avoiding shell interpretation.
Upgrade to Raine Consult-LLM-MCP version 2.5.4 or later, which addresses the command injection vulnerability by using a safer method for executing commands that does not involve shell interpretation.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Mar 30, 2026CISA-ADP
Assessed Mar 31, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/raine/consult-llm-mcp/ | [email protected] | Source CodeVendor |
| https://github.com/raine/consult-llm-mcp/commit/4abf297b34e5e8a9cb364b35f52c5f0ca1d599d3 | [email protected] | Source CodeVendor |
| https://github.com/raine/consult-llm-mcp/issues/6 | [email protected] | ExploitIssue TrackingTechnical DescriptionVendor |
| https://github.com/raine/consult-llm-mcp/releases/tag/v2.5.4 | [email protected] | Release NotesVendor |
| https://github.com/user-attachments/files/25821105/consult-llm-mcp_bug.pdf | [email protected] | ExploitPartial Content |
| https://vuldb.com/submit/780154 | [email protected] | Technical Description |
| https://vuldb.com/vuln/354157 | [email protected] | AdvisoryExploitRemedy |
| https://vuldb.com/vuln/354157/cti | [email protected] | Content Wall |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-77 | Improper Neutralization of Special Elements used in a Command ('Command Injection') | [email protected] |
| CWE-78 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| raine consult-llm-mcp | All versions |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Apr 29, 2026 | Data Remediation | [email protected] |
| Mar 30, 2026 | New CVE Received | [email protected] |