This vulnerability in Tenable Sensor Proxy involves improper control over code generation (CWE-94), allowing a remote attacker to execute code with elevated privileges by tricking an operator into connecting the sensor to an attacker-controlled host. The CVSS 3.1 base score is 9.6, indicating critical severity with network attack vector, low attack complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability. There is no vendor advisory or patch information available at this time.

Successful exploitation results in remote code execution with elevated privileges, potentially leading to full system compromise including confidentiality, integrity, and availability impacts. The attack requires user interaction (operator connecting to a malicious host), but no prior privileges or complex conditions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid connecting the Tenable Sensor Proxy to untrusted or attacker-controlled hosts to prevent exploitation.