Description


A vulnerability was identified in Linketic CityGaussian up to 2.0. This affects the function parse_cfg_args of the file internal/utils/common.py of the component Sidecar Parsing. The manipulation of the argument cfg_args leads to code injection. The attack can only be performed from a local environment. The project was informed of the problem early through an issue report but has not responded yet.

Related CPE's


Could not find any relations

Weaknesses



CWE-74CWE-94

CVSS impact metrics


CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

4.8 · Medium

Information


Source identifier

[email protected]

Vulnerability status

Deferred

Published

2026-10-13T00:17:00.700Z

14 hours ago

Last modified

2026-10-13T13:29:12.567Z

1 hour ago