ashen-mcp-server

CRITICAL COMMAND INJECTION VULNERABILITY: The server uses `subprocess.run` and `subprocess.check_output` to execute the `ollama` CLI tool. Parameters like `model` and `prompt` are taken directly from user-supplied RPC requests without apparent sanitization, making the server highly vulnerable to command injection. A malicious user could craft inputs to execute arbitrary commands on the host system (e.g., via the `call_ollama` or `analyze_text` methods). Additionally, `summarize_file` allows reading arbitrary file paths, although existence is checked, it still poses a potential information disclosure risk if combined with command injection to execute other tools.