ScadaLTS version 2.8.1-release-candidate build 0 contains an authenticated remote code execution vulnerability due to a scripting sandbox bypass. The vulnerability arises from the DWR "DataSourceEditDwr" class's "validateScript" method, which executes attacker-supplied JavaScript without authorization checks. This allows a low privilege authenticated user to execute arbitrary code remotely.