This vulnerability in pig-mesh Pig up to version 3.9.2 involves code injection through an unspecified functionality in the file \pig-master\pig-visual\pig-codegen\src\main\java\com\pig4cloud\pig\codegen\service\impl\GeneratorServiceImpl.java within the pig-codegen component. The flaw allows remote attackers to execute code injection attacks. Although an exploit is publicly available, the vendor has not issued any response or patch. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and low to limited impacts on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability could allow remote attackers to inject and execute arbitrary code within the affected pig-mesh Pig application, potentially compromising the integrity and availability of the system. The impact is rated medium based on the CVSS 4.0 score of 5.3, reflecting limited but notable risk.

No official fix or patch is currently available from the vendor, who has not responded to the disclosure. Users should monitor the vendor's communications for any future updates. In the meantime, consider restricting network access to the affected service and applying any relevant compensating controls to limit exposure. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.