The vulnerability in choieastsea simple-openstack-mcp up to commit 767b2f4a8154cca344344b9725537a58399e6036 is due to improper input handling in the exec_openstack function within server.py, leading to OS command injection. This allows remote attackers to execute arbitrary commands on the underlying operating system without authentication or user interaction. The project’s rolling release model complicates version tracking for affected and patched releases. The issue was responsibly disclosed but remains unaddressed by the vendor. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges or user interaction required, with low confidentiality, integrity, and availability impacts. Exploit code has been made public, increasing risk of exploitation.

Successful exploitation can lead to arbitrary OS command execution remotely, potentially compromising the affected system's confidentiality, integrity, and availability to a limited extent as indicated by the CVSS vector. The medium severity score reflects moderate risk. No confirmed active exploitation in the wild has been reported. The lack of vendor response and patch increases exposure risk for users of this software version.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should consider applying manual mitigations such as restricting network access to the vulnerable service, employing application-level input validation or sandboxing, or temporarily discontinuing use until a fix is available. Monitor official project channels for updates. Avoid relying on generic mitigations unless directly applicable.