CVE-2026-102911
Received Received - Intake

Command Injection in zosmaai pi-llm-wiki

Publication date: 2026-09-30

Last updated on: 2026-09-30

Assigner: VulDB

Description
A flaw has been found in zosmaai pi-llm-wiki up to 0.11.7. Affected is an unknown function of the file mcp/index.ts of the component wiki_capture_source MCP tool. Executing a manipulation of the argument url can lead to os command injection. The attack can be executed remotely. The exploit has been published and may be used. Upgrading to version 0.11.8 is able to address this issue. This patch is called 360867034e79175b45c8e04a98e4ca712bbaca35. Upgrading the affected component is advised.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-30
Last Modified
2026-09-30
Generated
2026-09-30
AI Q&A
2026-09-30
EPSS Evaluated
N/A
NVD
CVE-2026-102911
EUVD
EUVD-2026-89606

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
zosmaai pi-llm-wiki to 0.11.8 (exc)
zosmaai pi-llm-wiki 0.11.8

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-78 The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.
CWE-77 The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an OS command injection flaw (CWE-78) in zosmaai pi-llm-wiki up to version 0.11.7. The issue occurs in the wiki_capture_source MCP tool where user-controlled input (URL) is improperly passed to a shell command via sh -c. Attackers can inject malicious shell commands by manipulating the url parameter, allowing remote execution of arbitrary OS commands with the server's privileges.

Detection Guidance

To detect this vulnerability, check if your system is running pi-llm-wiki version 0.11.7 or earlier. Inspect the mcp/index.ts file for the wiki_capture_source component and verify if it uses shell-interpolated commands like sh -c with user-controlled input. Look for the presence of the vulnerable code pattern where URLs or file paths are embedded directly in shell commands.

Impact Analysis

An attacker could execute arbitrary commands on the server hosting pi-llm-wiki, potentially taking full control of the system. This could lead to data theft, system compromise, or disruption of services. The attack is remote and requires no authentication beyond access to the MCP interface.

Compliance Impact

This vulnerability could lead to unauthorized access and data breaches, violating GDPR's integrity and confidentiality requirements and HIPAA's security rules for protected health information. Organizations using affected versions may face compliance violations, legal penalties, and reputational damage due to potential data exposure.

Mitigation Strategies

Upgrade pi-llm-wiki to version 0.11.8 or later immediately. This version includes a patch that replaces shell-interpolated commands with direct argument passing, eliminating the risk of command injection. If upgrading is not possible, disable the wiki_capture_source MCP tool or restrict access to it until the update is applied.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-102911. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart