This vulnerability in Thales CERT Suspicious (<=1.3.4) is caused by improper limitation of a pathname to a restricted directory (CWE-22), enabling remote unauthenticated attackers to perform arbitrary code execution and overwrite critical application files. The flaw allows modification of Python modules, configuration files, cron inputs, and runtime artifacts, resulting in persistent denial of service and potential full compromise of the application environment with root-level privileges inside the Django container. The issue was reported by Lucien Doustaly and acknowledged by Thales PSIRT. No official patch or remediation level has been published as of now.

An attacker can remotely and without authentication execute arbitrary code and overwrite writable files within the application, including critical components like Python modules and configuration files. This leads to persistent denial of service, potential exposure or compromise of application secrets and integrations, and root-level execution inside the Django application container, representing a severe security risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to the application and monitor for suspicious activity. Follow any guidance provided by Thales PSIRT once available.