Vendor
An OS command injection vulnerability in the wiki_capture_source MCP tool of zosmaai pi-llm-wiki versions up to 0.11.7 allows remote unauthenticated attackers to execute arbitrary commands via the url argument.