Description

A weakness has been identified in NocteDefensor LudusMCP up to 1.0.24. The affected element is the function SecretDialog.showSecretDialog of the file src/utils/secretDialog.ts of the component get_credential_from_user. This manipulation of the argument Description causes command injection. It is possible to launch the attack on the local host. The project was informed of the problem early through an issue report but has not responded yet.

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "5.3",
  "pubDate": "2026-08-06T15:16:49.550Z",
  "pubdate": "2026-08-06T15:16:49.550Z",
  "executiveSummary": "A command injection vulnerability has been identified in NocteDefensor LudusMCP up to version 1.0.24, specifically residing within the get_credential_from_user component. The flaw is located in the SecretDialog.showSecretDialog function of the file src/utils/secretDialog.ts. This security defect arises from the insecure handling of the Description argument, which is manipulated to facilitate arbitrary command execution on the target operating system.\nThe primary impact of this vulnerability is local command injection, allowing an attacker with local host access to execute arbitrary system commands under the security context of the application. This could lead to full system compromise, unauthorized data exfiltration, or escalation of privileges depending on the permissions under which the LudusMCP application executes. The risk implication is elevated due to the unresponsiveness of the project maintainers following early disclosure via an issue report.\nExploitation of this vulnerability requires local host access to the affected system where the NocteDefensor LudusMCP instance is deployed. An attacker must be able to influence the Description argument processed by the get_credential_from_user component. No complex authentication or elevated privileges are inherently required beyond local execution capabilities to interact with the vulnerable function and supply the malicious payload.",
  "technicalDetails": "The vulnerability is rooted in insufficient input sanitization and improper validation of parameters passed to underlying system shell execution routines within the SecretDialog.showSecretDialog function. Specifically, the src/utils/secretDialog.ts file within the get_credential_from_user component accepts the Description argument and incorporates it directly into a dynamic command string or executes it via an unsafe system interface without proper escaping or the use of parameterized safe APIs.\nThe affected versions include NocteDefensor LudusMCP up to 1.0.24. The vulnerable component operates locally on the host system. The network exposure is limited to local interactions, meaning remote exploitation is not directly feasible unless chained with a separate remote code execution or local file inclusion vulnerability that permits local payload delivery and execution.\nThe attack flow proceeds as follows: First, the threat actor identifies or interacts with the get_credential_from_user component which invokes SecretDialog.showSecretDialog. Second, the attacker crafts a malicious payload containing operating system command separators or shell metacharacters embedded within the Description argument. Third, when the application processes the dialog and evaluates the Description parameter, the unsanitized input is concatenated into a system shell execution context.\nUpon evaluation by the underlying operating system shell, the injected command executes concurrently or sequentially with the intended application logic. The post-exploitation impact includes unauthorized execution of system binaries, manipulation of local files, deployment of persistent malware, and potential harvesting of sensitive credentials managed by the LudusMCP utility, entirely subverting the intended confidentiality, integrity, and availability of the host environment."
}