This vulnerability affects the PyBlade template engine component of AntaresMugisho, specifically the _is_safe_ast function in the sandbox.py file responsible for AST validation. Improper neutralization of special elements allows an attacker to manipulate templates in unintended ways. The issue is present in versions 0.1.8-alpha and 0.1.9-alpha. The vulnerability is remotely exploitable without requiring user interaction or elevated privileges. Although publicly disclosed, the vendor has not issued a fix or official remediation guidance as of the publication date.

Exploitation of this vulnerability could allow an attacker to manipulate template processing, potentially leading to injection of malicious content or execution of unintended code within the template engine context. The CVSS 4.0 base score is 5.3 (medium severity), reflecting network attack vector, low complexity, no privileges required, no user interaction, and low to limited impact on confidentiality, integrity, and availability. No known exploits are currently observed in the wild.

No official fix or patch is currently available from the vendor. Since the vendor has not responded or provided remediation guidance, users should consider avoiding use of affected versions 0.1.8-alpha and 0.1.9-alpha of PyBlade until a patch is released. Monitor the vendor's channels for updates. Applying additional input validation or sandboxing measures around template processing may reduce risk but are not confirmed mitigations for this specific issue. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.