This vulnerability in Laborator Kalium (<= 3.25) is classified as improper control of generation of code, commonly known as code injection. The CVSS 3.1 base score is 7.2, reflecting a network attack vector with low attack complexity, no privileges required, and no user interaction needed. The scope is changed, indicating that the vulnerability affects resources beyond the initially vulnerable component. The impact includes low confidentiality and integrity impacts, with no availability impact. No patch or mitigation details are currently provided.

Successful exploitation could allow an unauthenticated attacker to inject and execute code within the affected Kalium application, potentially leading to unauthorized disclosure or modification of data. Availability is not impacted. Since the scope is changed, the impact may extend beyond the vulnerable component, but exact consequences depend on the application context. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should monitor vendor communications for updates. No vendor advisory or patch links are currently provided, so no specific mitigation steps can be recommended beyond awaiting an official fix.