The vulnerability resides in the exec_openstack function of server.py and allows an attacker to inject arbitrary OS commands. This form of command injection directly leads to remote code execution, compromising confidentiality, integrity, and availability of the affected system. The weakness is classified as CWE-77 and CWE-78, representing command injection and OS command injection respectively.

The product impacted is choieastsea simple-openstack-mcp, any release built before the commit 767b2f4a8154cca344344b9725537a58399e6036 is vulnerable. Because the project uses rolling releases and does not publish definitive version numbers, all pending releases that incorporate code up to that commit are at risk.

With a CVSS score of 6.9, the vulnerability is considered medium severity. The EPSS score of 1% indicates that while exploitation is possible, it is not presently common, but the public nature of the exploit raises the likelihood of targeted attacks. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is remote access to the exposed exec_openstack endpoint, presumably through a management API exposed over HTTP, allowing the attacker to trigger arbitrary command execution. Discovery of this flaw has been reported publicly, making it actionable for adversaries.