This vulnerability allows remote attackers to perform OS command injection by manipulating the imageUrl argument in the open_image_in_browser function of the MCP Interface component in r-huijts mcp-server-rijksmuseum versions 1.0.0 through 1.0.4. The issue arises from improper handling of input leading to command injection. The vulnerability has a CVSS 4.0 base score of 5.3 (medium severity), indicating network attack vector with low complexity and no user interaction required. The vendor has been informed but has not issued any patch or mitigation guidance to date.

Successful exploitation could allow an attacker to execute arbitrary operating system commands remotely on affected installations of mcp-server-rijksmuseum up to version 1.0.4. This could lead to unauthorized system control or data compromise depending on the privileges of the affected process. No evidence of exploitation in the wild is currently reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should consider implementing temporary mitigations such as input validation or restricting network access to the vulnerable function if possible. Monitor vendor channels for updates and apply official patches once available.