Claude-Hovercraft Command Injection Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in Claude-Hovercraft. This issue arises from improper validation of user-supplied strings in the executeClaudeCode method, allowing remote attackers to execute arbitrary code on affected installations. The executed code runs under the service account, and no authentication is required to exploit this vulnerability.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected system, with the executed code running in the context of the service account.