CVE-2026-102911: zosmaai pi-llm-wiki wiki_capture_source MCP tool index.ts os command injection
A flaw has been found in zosmaai pi-llm-wiki up to 0.11.7. Affected is an unknown function of the file mcp/index.ts of the component wikicapturesource MCP tool. Executing a manipulation of the argument url can lead to os command injection. The attack can be executed remotely. The exploit has been published and may be used. Upgrading to version 0.11.8 is able to address this issue. This patch is called 360867034e79175b45c8e04a98e4ca712bbaca35. Upgrading the affected component is advised.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
zosmaai/pi-llm-wikito a version that resolves this vulnerability.Fixed in 0.11.8Patch 360867034e79175b45c8e04a98e4ca712bbaca35
Event History
Frequently Asked Questions
Which deployments are affected?
zosmaai pi-llm-wiki versions up to and including 0.11.7 are affected. Version 0.11.8 addresses the issue.
What does an attacker need to exploit this issue?
The attacker must be able to remotely supply a manipulated url argument to the wiki_capture_source MCP tool. No user interaction is required, and the vulnerability is rated low complexity with low privileges required.
Is exploit activity a practical concern?
Yes. A public exploit has been published, so affected deployments should be treated as exposed where remote users or integrations can influence the url argument.
What should be done to remediate the vulnerability?
Upgrade zosmaai pi-llm-wiki to version 0.11.8. The remediation is associated with patch 360867034e79175b45c8e04a98e4ca712bbaca35.