The vulnerability arises from a weakness in how the Input Text component processes user input, which can lead to misconfiguration and operational errors. The weakness does not directly enable code execution or data exfiltration, but it creates a pathway for administrators or automated processes to improperly configure the system, potentially disrupting normal operations.

HCL BigFix RunBookAI is affected. The CPE indicates the product, but no specific version information is provided in the available data.

This flaw receives a CVSS score of 2.7, reflecting low overall impact and limited exploitation potential. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, indicating that it has not been identified as a high‑priority exploited issue. The likely attack vector involves local or privileged users interacting with the Input Text feature, and the description suggests that exploitability requires misconfiguration; no public exploitation scenarios are documented.