This vulnerability involves DLL hijacking in VegaBird Yaazhini 2.0.2, where an attacker can place a malicious DLL alongside the executable (Yaazhini.exe) to execute arbitrary code. The CVSS 3.1 score of 9.8 indicates high exploitability and impact, with network attack vector, no privileges or user interaction required, and full confidentiality, integrity, and availability impact. No patch or official fix is currently documented.

Successful exploitation allows an unauthenticated attacker to execute arbitrary code remotely, potentially leading to full system compromise, data loss, and persistent unauthorized access. The vulnerability affects confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, restrict write permissions to the directory containing Yaazhini.exe to prevent placing unauthorized DLLs. Monitor for suspicious DLL files in the application directory and consider application whitelisting or execution prevention controls.