FoundDream Miniclawd OS Command Injection Vulnerability

A critical OS command injection vulnerability exists in FoundDream Miniclawd versions prior to commit 2d65665046e2222eeea76cafc8570ed546a8c125. The issue arises in the ExecTool.execute function within the file src/tools/exec.ts. This vulnerability allows arbitrary command execution by injecting shell metacharacters, exploiting the Node.js spawn() function with shell execution enabled. The vulnerability can be exploited remotely.

Impact

Exploitation of this vulnerability allows for arbitrary command execution on the server where Miniclawd is running.

Reproduction

To reproduce this vulnerability, send a crafted message to the Miniclawd AI assistant that includes shell metacharacters. The AI will pass this command to the ExecTool.execute function, which will execute the command in the shell. For example, a message like 'Run ls; cat /etc/passwd to check system' would be processed and executed, demonstrating the command injection flaw.