Evidence · DiggingBeagle record
MiniMax Mini-Agent issue 133, weather MCP tool result to shell command
Independent reporter local test where an MCP weather response induced shell execution on one model but was refused on another.
- Source role
- primary disclosure
Evidence record
Independent reporter local test where an MCP weather response induced shell execution on one model but was refused on another.
Claim-level citations (1)
- supportsMini-Agent weather tool output induced shell execution in a local model test: A security reporter demonstrates that Mini-Agent 0.1.0 with Qwen2.5-3B-Instruct executed a shell command embedded in a malicious MCP weather response; the same attempted injection was refused in a DeepSeek test.
MiniMax GitHub issue 133, Summary, local test results, tested model and affected command execution code