This vulnerability in Metagauss ProfileGrid allows an attacker with low privileges to remotely retrieve embedded sensitive system information without user interaction. The issue affects all versions through 5.9.5.2. The CVSS vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, and limited confidentiality impact. No integrity or availability impact is noted. No patch or vendor advisory is currently available to confirm remediation status.

An attacker with low privileges can remotely access sensitive system information embedded within the ProfileGrid application. This exposure could potentially aid further attacks but does not directly affect system integrity or availability. The confidentiality impact is limited, as reflected by the CVSS score of 4.3. There are no known active exploits targeting this vulnerability at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the ProfileGrid application to trusted users and networks where possible. Monitor for updates from Metagauss regarding patches or mitigations.