Zcode
Monthly
OS command injection in the Sed Command Filter component of Z.ai Zcode (versions up to and including 3.14.3/3.15.1) lets a remote attacker who already holds a low-privileged authenticated session push input into a shell invocation and obtain limited confidentiality, integrity and availability impact rather than full host takeover. The reporting source is VulDB and the vendor-facing reference scores it 5.3 under CVSS 4.0; a public PoC reference exists, but it is not verified as working exploit code, and there is no confirmed active exploitation (no CISA KEV listing). Risk is capped by the authentication prerequisite (PR:L in both the reported and independently assessed vectors), and the priority label is this_month rather than act_now.
OS command injection in the Sed Command Filter component of Z.ai Zcode (versions up to and including 3.14.3/3.15.1) lets a remote attacker who already holds a low-privileged authenticated session push input into a shell invocation and obtain limited confidentiality, integrity and availability impact rather than full host takeover. The reporting source is VulDB and the vendor-facing reference scores it 5.3 under CVSS 4.0; a public PoC reference exists, but it is not verified as working exploit code, and there is no confirmed active exploitation (no CISA KEV listing). Risk is capped by the authentication prerequisite (PR:L in both the reported and independently assessed vectors), and the priority label is this_month rather than act_now.