Code injection in MetaGPT's DataInterpreter role (versions 0.8.0-0.8.2) enables a local low-privileged user to inject and execute arbitrary code through the `DataInterpreter` function in `metagpt/roles/di/data_interpreter.py`. A public proof-of-concept exploit is available via GitHub Gist, though the CVSS 4.0 score of 1.9 reflects the constrained blast radius: local-only access, low-privilege requirement, and limited impact (low C/I/A, no scope change to subsequent systems). The vendor did not respond to pre-disclosure notification, leaving patch status unresolved.
Path traversal in lspace-server's Repositories File API permits low-privileged local attackers to escape the intended repository directory by manipulating the filePath argument passed to the fileExists, readFile, writeFile, and deleteFile functions in src/core/repository.ts. All commits up to 79f02fe5aa8970b210a6a05cf097155f8d9ffd71 are affected; the project uses rolling continuous delivery with no discrete versioned releases. A proof-of-concept exists (CVSS 4.0 E:P modifier), the vendor has not responded to responsible disclosure, and no patch has been released - though no active exploitation (CISA KEV) has been identified.
Improper input validation in OMICRON StationGuard 4.00 allows an adjacent network attacker to crash the IEC 61850 Sampled Values processing component by sending a specially crafted SV frame. The disruption is self-healing - the process restarts automatically and the failure is immediately surfaced to operators - leaving overall system availability and all other monitored traffic types unaffected. No public exploit code exists and this vulnerability is not listed in CISA KEV; the CVSS 4.0 score of 1.3 reflects the accurately bounded, minimal real-world impact.