This vulnerability in Toowiredd chatgpt-mcp-server (up to version 0.1.0) involves OS command injection through an unspecified function in the src/services/docker.service.ts file of the MCP/HTTP component. The flaw allows remote attackers to execute arbitrary operating system commands without authentication or user interaction. The project has been informed but has not issued a patch or mitigation. The vulnerability has a CVSS 4.0 score of 6.9, reflecting medium severity with network attack vector, low complexity, no privileges required, and no user interaction needed.

Successful exploitation enables remote attackers to execute arbitrary OS commands on the affected server, potentially leading to system compromise or unauthorized control. The availability of public exploit code increases the likelihood of attacks. However, no known exploits in the wild have been reported yet.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should monitor official channels for updates. Until a patch is available, consider restricting network access to the affected service and applying any possible configuration workarounds if documented by the vendor.