This vulnerability in Logsign SIEM arises from improper control over code generation, enabling code injection attacks. It affects all versions prior to 6.4.108. The CVSS 3.1 base score is 9.8, indicating critical severity with network attack vector, low attack complexity, no privileges or user interaction required, and full confidentiality, integrity, and availability impact. No official remediation or patch information is currently provided, and no known exploits in the wild have been reported.

Successful exploitation could allow remote attackers to execute arbitrary code on affected systems without authentication, potentially leading to full system compromise including confidentiality, integrity, and availability impacts.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to the affected Logsign SIEM instances and monitor for suspicious activity related to code injection attempts.