In MoviePilot versions up to 3.1.5 a flaw in the ExecuteCommandTool allows attackers to inject operating system commands. By embedding malicious instructions into untrusted content that is later processed by parsers such as browse_webpage, search_web, or torrent metadata parsers, a user can cause the tool to execute those commands. The vulnerability bypasses command safety checks and requires only that the attacker can influence content that triggers a call to execute_command with confirm_dangerous set to true, exploiting the administrator session context. This leads to arbitrary code execution on the host system and full compromise of confidentiality, integrity, and availability.

MoviePilot software, sold by jxxghp, up to and including version 3.1.5. No other versions or vendors are listed as affected.

The CVSS score of 8.7 marks this flaw as high severity. The EPSS score of 1% indicates a low but nonzero likelihood of exploitation, suggesting that the vulnerability is still likely to be targeted in the future, although no widespread exploitation has been reported. This flaw is not listed in CISA KEV, implying no known exploited instances yet. The likely attack vector is remote, through crafted content that a user submits to a MoviePilot instance with administrative privileges, which triggers the ExecuteCommandTool via asyncio.create_subprocess_shell.