Command Injection (CWE-78) — Remote Code Execution
A remote attacker can execute arbitrary code by supplying a crafted MCP tool-call argument that reaches a local shell invocation.
affected component build/services/sage-executor.js — the local shell-execution path. The escaping applied to tool-call arguments is incomplete; one metacharacter is not neutralised, which lets an argument terminate the quoted context. The specific function, the unescaped character and the proof-of-concept are WITHHELD until a fixed version is published or the 90-day deadline passes.
The affected component and public references are stated so you can confirm the finding from the package's own published source. A weaponized reproduction is withheld under coordinated disclosure until a fixed version ships.