An administrator with local authentication can trigger arbitrary code execution through the web interface and the Alert artifact details page. The flaw is a classic code injection (CWE‑94), allowing the injection of system commands via unsanitized inputs. Successful exploitation could compromise the entire CM or NX system, leading to loss of confidentiality, integrity, and availability.

The vulnerability affects Trellix Network Security CM and NX. No specific version numbers are supplied, so all deployments of these services are potentially exposed until vendor patches are applied.

The CVSS base score is 7.1, indicating high severity, though no EPSS data is available. The vulnerability is not listed in CISA's KEV catalog. The attack vector is inferred administrator must access the web interface to trigger the injection, implying that systems exposed to admin credentials are at risk.