This vulnerability in r-huijts mcp-server-rijksmuseum (<=1.0.4) allows remote OS command injection via manipulation of the imageUrl parameter in the open_image_in_browser function of src/index.ts. The vulnerability enables an attacker to execute arbitrary operating system commands on the affected system. The project was notified early but has not issued a patch or official remediation. The CVSS 4.0 base score is 5.3, indicating medium severity with network attack vector, low attack complexity, and no privileges or user interaction required.

Successful exploitation allows remote attackers to execute arbitrary OS commands on the affected system, potentially compromising system integrity and confidentiality. The vulnerability affects all versions up to 1.0.4. No known active exploitation has been reported, but public exploit code exists, increasing the risk of attacks.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should consider applying temporary mitigations such as input validation or restricting access to the vulnerable function until an official patch is available.