This vulnerability affects the eval function in premsql/agents/baseline/workers/followup.py of premAI-io premsql versions 0.2.0 and 0.2.1. An attacker can remotely manipulate the argument 'result' passed to this function, leading to code injection. The vulnerability allows execution of arbitrary code due to improper handling of input in the eval function. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges or user interaction required, and low to limited impacts on confidentiality, integrity, and availability. The vendor has not issued any patch or official fix, and no cloud service is involved.

Successful exploitation could allow an attacker to execute arbitrary code remotely on affected systems running premAI-io premsql up to version 0.2.1. This could compromise system integrity and potentially confidentiality and availability to a limited extent. The medium CVSS score reflects moderate risk due to the ease of remote exploitation but limited impact severity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or provided a fix, users should consider mitigating exposure by restricting network access to the affected service and monitoring for suspicious activity involving the eval function. Avoid using affected versions if possible until an official patch or workaround is released.