The ValidateArgumentType RPC endpoint in OliveTin versions through 3000.12.9 does not perform authentication or authorization checks, allowing any user to query available action identifiers and their argument schemas. This flaw does not directly permit command execution but leaks metadata about configured shell commands, potentially aiding a threat actor in reconnaissance and future attack planning. The weakness aligns with CWE-862, Missing Access Control.

All installations of OliveTin versions 3000.0.0 and prior are affected, regardless of configuration. The issue is resolved in OliveTin 3000.13.0 and later releases.

The CVSS score of 3.7 classifies this vulnerability as low severity, reflecting the limited impact of merely enumerating action IDs and arguments. The EPSS score of less than 1% indicates an extremely low likelihood of exploitation, and the vulnerability is not listed in the CISA KEV catalog. Nevertheless, unauthenticated enumeration could be leveraged in conjunction with other weaknesses, enabling more targeted attacks on the system. The attack vector is unauthenticated HTTP requests to a public API endpoint.