Why it matters
PentestAgent is a niche single-author agentic pentesting tool; command injection in its MCP tool-invocation path is a textbook agent-tool RCE, but low current deployment breadth limits blast radius versus the HexStrike/PraisonAI findings.
Attack vector
The run_task function of the MCP HTTP Server component (interface/main.py) is vulnerable to OS command injection, remotely exploitable per the CVE record.
Affected systems
GH05TCREW PentestAgent (up to commit cf882dabea3ed91cef016cdd115e5426315665a2)
Mitigation
No patch confirmed at time of publication; avoid exposing the PentestAgent MCP HTTP server to untrusted input.