This vulnerability (CVE-2025-15024) affects the Yordam Library Automation System and is classified as CWE-94: Improper Control of Generation of Code, commonly known as code injection. It allows an attacker to perform remote code inclusion, potentially executing arbitrary code on the affected system. The affected versions are from 19.5 up to but not including 22.1. The CVSS 3.1 base score is 8.8, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability. No patch or official remediation level has been published, and the product is not a cloud service, so remediation depends on vendor updates.

Successful exploitation could allow an attacker to remotely include and execute arbitrary code on the affected system, leading to full compromise of confidentiality, integrity, and availability of the Library Automation System. This could result in unauthorized access, data manipulation, or service disruption. No known exploits have been reported in the wild so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or workaround has been published, organizations should monitor vendor communications closely. Until a fix is available, consider restricting network access to the affected system and limiting user interaction to reduce exposure to exploitation attempts.