This vulnerability affects chatboxai chatbox up to version 1.20.0 in the StdioClientTransport function of src/main/mcp/ipc-stdio-transport.ts. By manipulating the arguments passed to args/env, an attacker can perform OS command injection remotely. The issue was responsibly disclosed but remains unpatched as of the publication date. The CVSS 4.0 base score is 6.9, indicating medium severity with network attack vector, no privileges required, no user interaction, and partial impact on confidentiality, integrity, and availability.

Successful exploitation allows remote attackers to execute arbitrary operating system commands on the affected system with no privileges or user interaction required. This can lead to partial compromise of confidentiality, integrity, and availability of the system running the vulnerable chatboxai chatbox software. The vulnerability is exploitable remotely and an exploit is publicly available, increasing the risk of attack. However, there is no indication of widespread exploitation in the wild at this time.

No official patch or remediation is currently available from the vendor. Users should monitor the vendor's communications for updates and apply any future patches promptly. Until a fix is released, consider implementing network-level protections such as restricting access to the affected service to trusted hosts only. Avoid exposing the vulnerable chatboxai chatbox instance to untrusted networks. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.