This vulnerability in Toowiredd chatgpt-mcp-server up to version 0.1.0 involves OS command injection through an unknown functionality in the src/services/docker.service.ts file of the MCP/HTTP component. Remote attackers can exploit this flaw without authentication or user interaction to execute arbitrary operating system commands. The vulnerability has been publicly disclosed, but no official fix or remediation guidance has been provided by the vendor as of the publication date.

Successful exploitation allows remote attackers to execute arbitrary OS commands on the affected system, potentially leading to unauthorized system control or data compromise. The vulnerability does not require privileges or user interaction, increasing its risk. However, the vendor has not yet provided a patch or mitigation, and no known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or issued a fix, users should consider applying temporary mitigations such as restricting network access to the affected service or isolating the affected component until an official patch is available. Monitor vendor channels for updates.