The vulnerability in hayabusa before version 3.8.0 is a cross-site scripting (CWE-79) flaw in the HTML report generation process. Specifically, the Computer field in JSON-exported logs is not properly neutralized, allowing an attacker to embed arbitrary JavaScript code. When a user views the HTML report generated from such logs, the malicious script executes in their browser context. This can result in unauthorized information disclosure or execution of arbitrary code within the user's session. There is no official remediation level or patch currently documented, and no known exploits in the wild have been reported.

Successful exploitation allows an attacker to execute arbitrary JavaScript in the context of the forensic examiner's browser session when viewing the HTML report. This can lead to information disclosure or code execution within that session. The vulnerability requires the attacker to inject malicious content into the Computer field of JSON logs that are later scanned and viewed by the user.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should avoid scanning or viewing JSON-exported logs containing untrusted or suspicious Computer field data in hayabusa versions prior to 3.8.0. Monitoring vendor communications for updates is recommended.