This vulnerability in CoslatV3 arises from improper neutralization of special elements in code and command generation, enabling command injection and privilege escalation. It affects versions through 3.1069. The vendor confirmed the product is unsupported, so no official remediation exists. The CVSS 4.0 vector indicates the attack requires local access with low complexity and no user interaction, but results in high confidentiality, integrity, and availability impact. No patch or workaround is currently available.

An attacker with local access and limited privileges can exploit this vulnerability to execute arbitrary code or commands with escalated privileges, potentially compromising system confidentiality, integrity, and availability. Since the product is unsupported, affected systems remain vulnerable without vendor-provided fixes. No known active exploitation has been reported.

No official patch or fix is available because the vendor no longer supports CoslatV3. Organizations should consider discontinuing use of this product or isolating affected systems to reduce risk. Employing strict access controls to limit local access may reduce exposure. Monitor for suspicious local activity as a precaution. Patch status is not confirmed due to lack of vendor support.