A command injection vulnerability in mcp-server-siri-shortcuts allows low-privileged local attackers to achieve arbitrary code execution and privilege escalation.

The application fails to properly sanitize user-supplied input within the shortcutName parameter before passing it to a system call. This allows an authenticated, low-privileged user to inject malicious commands that execute with the privileges of the service account.

Successful exploitation of this vulnerability results in full system compromise for the affected service account. Given the CVSS score of 7.8, this represents a high-severity risk where an attacker can gain unauthorized elevated access, potentially leading to data exfiltration, lateral movement, or complete disruption of the service.

Immediate Action: Restrict access to the affected system to trusted users only and monitor for any signs of unauthorized privilege escalation attempts until a vendor-supplied patch is made available.

Proactive Monitoring: Audit system logs for unexpected child processes spawned by the mcp-server-siri-shortcuts service or unusual command-line arguments involving system utilities.

Compensating Controls: Implement strict command-line argument validation at the OS level or utilize security software to monitor for and block suspicious shell execution patterns originating from the application process.

Public Exploit Available: Unknown.

Organizations utilizing mcp-server-siri-shortcuts should prioritize the implementation of strict access controls to limit the pool of users capable of interacting with the service. Because this flaw allows for privilege escalation, it is essential to treat the affected service as a high-risk asset and apply vendor updates as soon as they are released to permanently remediate the underlying command injection vulnerability.