CVE-2026-79623

FishCodeTech Muteki (up to 0.2.5 ) contains an OS command injection vulnerability in the Default Local Worker Backend component, specifically in the file .claude/settings.json. The manipulation can be initiated remotely with low privileges and no user interaction, yielding moderate impact on conf...