Description

A security flaw has been discovered in iatsiuk pptr-mcp up to 0.2.7. The impacted element is the function executeCode of the file src/vm-executor.ts of the component execute Tool. The manipulation results in code injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "6.3",
  "pubDate": "2026-08-16T23:16:24.530Z",
  "pubdate": "2026-08-16T23:16:24.530Z",
  "executiveSummary": "A critical code injection vulnerability has been identified in the iatsiuk pptr-mcp component up to version 0.2.7. The flaw resides within the executeCode function inside the src/vm-executor.ts file and is exposed via the execute tool. This security defect allows remote threat actors to inject and execute arbitrary code within the target environment.\nThe risk implications are severe, as successful exploitation enables remote attackers to achieve unauthorized code execution without prior authentication or special privileges. Since a public exploit has already been released and the project maintainers have been unresponsive to early issue reports, systems utilizing the affected versions of pptr-mcp are at an immediate risk of compromise.\nThe attack vector is network-based, meaning malicious payloads can be transmitted remotely to trigger the underlying flaw. The impact includes complete system compromise, unauthorized access to sensitive resources, and potential execution of malicious binaries or scripts within the host context.",
  "technicalDetails": "The vulnerability stems from improper neutralization of input passed to the execution engine within the src/vm-executor.ts file of the pptr-mcp component. Specifically, the executeCode function fails to adequately sanitize or safely evaluate untrusted input data received via the execute tool before processing it.\nThe affected product is iatsiuk pptr-mcp in all versions up to 0.2.7. The vulnerability is accessible remotely, allowing an unauthenticated attacker across the network to interact with the execute tool interface. Because validation mechanisms are absent or insufficient within the vm-executor logic, malicious instructions can bypass intended security boundaries.\nThe attack flow proceeds as follows: First, a remote attacker crafts a malicious payload designed to exploit the code injection vector. Second, the attacker transmits this payload to the vulnerable endpoint exposing the execute tool. Third, the request is routed to the executeCode function located in src/vm-executor.ts. Fourth, the function processes the unsanitized input, leading to the direct execution of the injected code by the underlying runtime environment.\nPost-exploitation impact includes arbitrary command execution, potential lateral movement within the network, data exfiltration, and complete compromise of the host running the affected pptr-mcp instance. Given that public exploit code is actively available, attackers can automate the exploitation process against exposed targets."
}