This vulnerability exists in HKUDS AnyTool 0.1.0 within the subprocess.run function of anytool/local_server/main.py. Improper handling of the command or shell argument allows an attacker to perform OS command injection remotely. The project was notified early via an issue report but has not provided a fix or response. Public exploit code is available, increasing the risk of exploitation.

Successful exploitation allows remote attackers to execute arbitrary OS commands on the affected system with the privileges of the AnyTool process. This can lead to system compromise, data theft, or disruption of service. The CVSS 4.0 base score is 6.9 (medium severity), reflecting network attack vector, no required privileges or user interaction, and low to limited confidentiality, integrity, and availability impacts.

No official fix or patch is currently available from the vendor. Users should monitor the vendor's advisories for updates. Until a patch is released, avoid exposing the vulnerable AnyTool 0.1.0 service to untrusted networks or restrict access to trusted users only. Consider implementing network-level controls or application-layer filtering to mitigate exploitation risk.