mcp-server-llmling

The server includes a 'config injection server' (FastAPI/WebSocket API) that, if enabled and exposed, allows for arbitrary code execution. This includes registering Python code as tools, importing functions from specified paths, and installing Python packages via pip. While disabled by default and restricted to 'stdio' transport by default, enabling this feature (e.g., via `--enable-injection`) requires extreme caution and robust access controls as it presents a severe Remote Code Execution (RCE) vulnerability. Additionally, example configurations may load external scripts from untrusted sources (e.g., Gist URLs), posing a supply chain risk if used.