A critical command injection vulnerability in evernote-mcp-server allows local attackers to escalate privileges and execute arbitrary code as the service account.

The flaw resides in the openBrowser function, where improper validation of user-supplied input before passing it to a system call permits OS command injection. An attacker must possess low-privileged access to the target system to initiate this attack.

Successful exploitation of this vulnerability enables a local attacker to escalate privileges to the level of the service account. Given the high CVSS score of 7.8, this poses a significant risk of total system compromise, unauthorized data access, and the potential for lateral movement within the environment.

Immediate Action: Apply the fix provided in commit 1e66c78c4ce6ea294ac6b0eb289a9eae9c5e9579, as no official versioned patch is explicitly named.

Proactive Monitoring: Monitor system logs for unexpected child processes spawned by the service account or anomalous shell commands originating from the evernote-mcp-server process.

Compensating Controls: Restrict local user access to the host system and enforce the principle of least privilege to ensure that compromised accounts cannot reach the vulnerable service.

Public Exploit Available: Unknown

This vulnerability represents a high-risk privilege escalation vector that could grant an attacker full control over the service account. Administrators should prioritize verifying their current version and applying the upstream fix immediately to prevent potential exploitation.