XixianLiang HarmonyOS-mcp-server Command Injection Vulnerability in Version 0.1.0

A command injection vulnerability has been identified in XixianLiang HarmonyOS-mcp-server version 0.1.0. The issue arises in the 'input_text' function, where the 'text' parameter is improperly handled, allowing for arbitrary OS command execution. This vulnerability can be exploited remotely, and a public exploit is available.

Impact

Exploitation of this vulnerability allows for arbitrary command execution on the server where HarmonyOS-mcp-server is running. The impact varies based on the deployment model of the MCP service. In a local deployment without sandboxing, commands are executed with the current user's privileges. In a remote, multi-tenant SaaS environment, the vulnerability could lead to a critical cross-tenant compromise.

Reproduction

To reproduce this vulnerability, call the 'input_text' function with a 'text' parameter that includes a command injection payload, such as 'zzz&calc'. This can be done using the available public exploit.