This vulnerability involves an argument injection in the find command query within Raynet rvia 12.6.4392.49. The application attempts to locate a Java executable using search criteria that are not properly terminated or sanitized. By constructing a specially crafted directory structure and path, a local attacker can manipulate the find command to execute arbitrary Java code. This arbitrary code execution flaw results from the application's internal search logic rather than standard PATH manipulation. The vulnerability affects the specified version of Raynet rvia and allows local code execution via crafted directory paths.

Successful exploitation allows a local attacker to execute arbitrary Java code on the affected system, potentially leading to unauthorized code execution with the privileges of the application. This could compromise system integrity and confidentiality depending on the application's context and privileges. There are no known public exploits or reports of active exploitation at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should restrict local access to trusted users only and monitor for suspicious activity related to directory structures used by the application. Avoid running the vulnerable version in untrusted environments. No official remediation or temporary fix has been published.