This vulnerability exists in the add_mcp_server function of the astrbot/dashboard/routes/tools.py file in AstrBotDevs AstrBot up to version 4.22.1. It allows remote attackers to perform command injection by manipulating the command argument, potentially leading to arbitrary command execution on the affected system. The issue was reported early to the project but remains unaddressed, and no official patch or remediation guidance is currently available. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges or user interaction required, with low confidentiality, integrity, and availability impacts.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands remotely on the affected system, potentially compromising system integrity and availability. However, the impact is rated as medium severity with low confidentiality, integrity, and availability impacts according to the CVSS 4.0 vector. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should consider applying workarounds such as restricting access to the affected function or input validation to prevent command injection until an official patch is available.