From 8f88152532bba4e6e2dc620bb4a324037eff2feb Mon Sep 17 00:00:00 2001
From: qwint <qwint.42@gmail.com>
Date: Wed, 3 Sep 2025 14:01:56 -0500
Subject: [PATCH] MultiServer: Validate CreateHints status arg #5408

---
 MultiServer.py | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/MultiServer.py b/MultiServer.py
index 11a9e394..2b58b340 100644
--- a/MultiServer.py
+++ b/MultiServer.py
@@ -1961,6 +1961,16 @@ async def process_client_cmd(ctx: Context, client: Client, args: dict):
             if not locations:
                 await ctx.send_msgs(client, [{"cmd": "InvalidPacket", "type": "arguments",
                                               "text": "CreateHints: No locations specified.", "original_cmd": cmd}])
+                return
+
+            try:
+                status = HintStatus(status)
+            except ValueError as err:
+                await ctx.send_msgs(client,
+                                    [{"cmd": "InvalidPacket", "type": "arguments",
+                                      "text": f"Unknown Status: {err}",
+                                      "original_cmd": cmd}])
+                return
 
             hints = []