A vulnerability was found in choieastsea simple-openstack-mcp up to 767b2f4a8154cca344344b9725537a58399e6036. The affected element is the function exec_openstac…

A remote code execution vulnerability (CVE-2026-7066) was discovered in choieastsea simple-openstack-mcp project up to commit 767b2f4a8154cca344344b9725537a58399e6036. The vulnerability affects the exec_openstack function in server.py, allowing OS command injection attacks. The exploit can be launched remotely and has been made public. The project maintainer has not responded to the vulnerability report despite early notification through an issue report.