The vulnerability CVE-2025-67944 in Nelio AB Testing arises from improper control over code generation, enabling code injection attacks. It affects all versions up to 8.1.8. The CVSS 3.1 base score is 9.1 (critical), reflecting network attack vector, low attack complexity, high privileges required, no user interaction, scope change, and high impact on confidentiality, integrity, and availability. No patch or official fix information is provided in the available data.

Successful exploitation of this vulnerability could allow an attacker with high privileges to inject and execute arbitrary code within the context of the Nelio AB Testing plugin. This can lead to complete compromise of the affected system's confidentiality, integrity, and availability. No known active exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict high-privilege access to the Nelio AB Testing plugin and monitor for unusual activity related to code execution within the plugin environment.