This vulnerability (CVE-2026-8312) in Arena® Simulation arises from an out-of-bounds write due to improper validation of user input in the expmt.exe (Siman) component. An attacker can exploit this by convincing a user to open a crafted malicious file, potentially resulting in arbitrary code execution within the context of the current process. The CVSS 4.0 vector indicates local attack vector with low complexity, requiring low privileges and user interaction, and high impact on confidentiality, integrity, and availability. No official remediation or patch information is currently available.

Successful exploitation can lead to arbitrary code execution with the privileges of the current user, potentially compromising system confidentiality, integrity, and availability. This could allow attackers to execute malicious code, disrupt operations, or gain unauthorized access within the affected environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should avoid opening untrusted or suspicious files with Arena® Simulation's expmt.exe component and apply general best practices for handling files from unverified sources.