This vulnerability in WonderTrader up to version 0.9.9 involves a weakness in the MatchEngine::update_lob function within the Internal Limit Order Book Cache Handler. The flaw allows remote attackers to manipulate the enforcement of behavioral workflow, potentially impacting the internal processing logic. Exploit code has been publicly disclosed. The vendor was notified but has not issued any response or patch. The CVSS 4.0 base score is 5.3, indicating medium severity, with network attack vector, low attack complexity, no privileges required, and no user interaction needed.

Successful exploitation could allow remote attackers to manipulate the behavioral workflow enforcement in the affected component, potentially disrupting normal operation or causing unintended behavior in the order book cache handling. No direct evidence of active exploitation in the wild is reported.

No official fix or patch is currently available, and the vendor has not responded to the disclosure. Users should monitor vendor channels for updates. Until a patch is released, consider restricting network access to the vulnerable component and applying compensating controls to limit exposure.