This vulnerability in Veeam ONE allows a user with high privileges to perform code injection, enabling arbitrary code execution on the affected server. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no user interaction required, and high impact on confidentiality, integrity, and availability. The vulnerability is categorized under CWE-94 (Improper Control of Generation of Code). No affected versions are explicitly stated, and no patch or remediation level has been disclosed by the vendor.

Successful exploitation could allow a high-privileged user to execute arbitrary code on the server, potentially leading to full compromise of the affected system. This could impact confidentiality, integrity, and availability of the Veeam ONE server environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict high-privileged user access to trusted personnel only and monitor for suspicious activity related to code execution on the server.