The vulnerability in choieastsea simple-openstack-mcp arises from improper input handling in the exec_openstack function within server.py, leading to OS command injection. This allows remote attackers to execute arbitrary operating system commands without authentication or user interaction. The rolling release model of the product complicates version tracking for affected and patched releases. Despite early notification, the vendor has not provided a remediation or official fix. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges or user interaction required, and low to low integrity and availability impacts.

Successful exploitation enables remote attackers to execute arbitrary OS commands on the affected system, potentially compromising system integrity and availability. The medium CVSS score reflects moderate risk due to ease of exploitation and potential impact. No confirmed active exploitation in the wild has been reported. Lack of vendor response means the vulnerability remains unpatched, increasing exposure risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or issued a fix, users should consider applying manual mitigations such as restricting network access to the vulnerable service, employing application-layer filtering, or isolating affected components until an official fix is available. Monitor for updates from the vendor or community for patches or workarounds.