This vulnerability (CVE-2026-8313) affects the Arena® Simulation product by Rockwell Automation. It arises from improper validation of user input in the linker.exe (Siman) component, leading to an out-of-bounds write (CWE-787). Successful exploitation could enable an attacker to execute arbitrary code with the privileges of the user running the application. The attack vector requires local access with low privileges and user interaction (opening a malicious file). The CVSS 4.0 base score is 7.0, reflecting high impact on confidentiality, integrity, and availability. No known exploits are reported in the wild, and no patch or official fix has been disclosed by the vendor as of the published date.

If exploited, this vulnerability allows an attacker to execute arbitrary code in the context of the current user process, potentially leading to system compromise or unauthorized actions. The attack requires user interaction and local access with low privileges. The vulnerability impacts confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when opening files from untrusted sources to avoid triggering this vulnerability.