Gongyanyu

A path traversal issue exists in the `screenshotElement()` function within the `src/index.ts` file of the `screenshot element` Tool. This flaw allows a remote attacker to manipulate the `output name` argument to access or write files outside the intended directory. Path traversal is a technique used to access files and directories that are stored outside the web root folder by manipulating variables that reference files with input that is not properly validated.

Command injection is possible via the SSH Command Handler component in the `ssh exec()` function located in the src/index.ts file. This occurs when the `host/username` argument is manipulated. The attack requires local access. The project maintainer notes that the tool is intended for local/trusted agents who already possess execution capabilities through the exposed shell.

A remote flaw exists in a function within the `src/services/dcrClients.ts` file. This issue allows for server-side request forgery, a technique where an attacker induces the server to make requests to an unintended location.

Command injection is possible via remote attack in the NPM Package Version Handler component. The issue resides in the `this.packageService.installPackage()` function within the `src/controllers/packages.ts` file.

Command injection is possible when the `projectPath` argument is manipulated within the `executeOperation()` function located in the `src/index.ts` file of the `create scene/add node` component. This issue requires the attack to be launched locally.

Command injection is possible on the local host through the manipulation of the `Description` argument within the `SecretDialog.showSecretDialog()` function, located in the `src/utils/secretDialog.ts` file of the `get credential from user` component.

A path traversal issue exists within the `ludus environment guides search` component, specifically in a function located in the `src/tools/ludusEnvironmentGuidesSearch.ts` file. This occurs when the `guide name` argument is manipulated, allowing an attacker with local access to access files outside the intended directory. Path traversal is a technique used to access files and directories that are stored outside the web root folder.

Command injection is possible through the manipulation of the `command` and `args` arguments. This issue resides within the `executeArbitraryCommand()` and `executeCommand()` functions located in the `src/ludusMCP/cliWrapper.ts` file of the `ludus cli execute` component. Exploitation requires local access to the system.

An issue in the Repositories File API component within the file `src/core/repository.ts` allows for path traversal—a method used to access files and directories that are stored outside the intended folder. This occurs when the `filePath` argument is manipulated within the `fileExists()`, `readFile()`, `writeFile()`, and `deleteFile()` functions. Exploitation requires local access.