Edgewall's Genshi Template Engine has a server‑side template injection flaw in its expression‑evaluation component that enables a remote attacker to supply crafted template expressions. The CVE description states that such expressions can lead to remote code execution, implying that rendering them may execute arbitrary Python code with the application's privileges.

The flaw affects Edgewall Genshi version 0.7.9. No other versions are listed as impacted in the CNA data.

Although a CVSS score is not published and EPSS data is unavailable, the vulnerability is considered high as it permits unauthenticated remote code execution. It is inferred that exploitation requires an attacker to provide malicious template input, which can be done over the network via any interface that accepts unfiltered templates. The issue is not yet included in CISA's KEV catalog, but the potential impact makes it a top priority for remediation.