This vulnerability affects Genesys Latitude v25.1.0.420 and arises from improper input sanitization, enabling authenticated users to inject and execute arbitrary SQL commands against the backend database. The lack of input validation allows attackers to manipulate SQL queries, potentially compromising data integrity or confidentiality. The CVE record does not provide a CVSS score or remediation details, and no exploits have been reported publicly.

Successful exploitation could allow an authenticated attacker to execute arbitrary SQL queries, potentially leading to unauthorized data access, modification, or deletion within the backend database. The exact impact depends on the database privileges of the application and the attacker's level of access. No evidence of active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to authenticated users only and monitor for suspicious activity related to SQL injection attempts. Avoid exposing vulnerable interfaces to untrusted users.