SharpEmu versions up to 0.0.3-release.3 are vulnerable due to missing authentication on its debugger frontend HTTP API running on localhost. This API lacks validation of critical headers and accepts cross-origin requests, allowing attackers with local network access to perform debugger operations, launch executables, and initiate outbound connections. The vulnerability is fixed in version 0.0.3-release.3-patch.1.