kali-mcp-agent

Critical command injection vulnerability exists in `run_nmap`, `ping_target`, `run_burpsuite`, and `run_sqlmap` functions. The `target` parameter is directly passed to `subprocess.run()` without any sanitization or quoting. This allows an attacker (or a misaligned LLM) to inject and execute arbitrary shell commands within the Docker container by crafting malicious input for the 'target' argument (e.g., '192.168.1.1; rm -rf /'). While running in a Docker container provides some isolation, this severe flaw can lead to a compromise of the container environment and potential network exposure, undermining the stated goal of 'safely' executing tools. The `run_metasploit` function also misleadingly accepts a 'target' argument in its signature but does not use it in the `subprocess.run` call, which while not an injection point in itself, suggests incomplete or inconsistent design.