Malcolm's kiosk Flask application exposes a POST /script_call/<script> endpoint that is reachable without authentication and with a wildcard CORS policy. This allows an attacker to trick an operator's browser into sending a forged request that invokes arbitrary management commands. Because the commands can delete forensic logs or stop monitoring, an attacker can erase critical evidence and compromise the system's security visibility. The weakness is a classic CSRF flaw (CWE-352).

The flaw affects Malcolm versions released before the advisory's patch, specifically those that have not been updated to v26.08.0. All installations running the vulnerable Flask endpoint should be considered at risk, regardless of the environment or interface.

The CVSS base score of 7.1 reflects a high impact and a moderate to high exploitability. The lack of authentication on the endpoint makes the attack trivial for anyone who can cause an operator to visit a malicious page, but the exploit requires the operator to be logged in to the kiosk. Since the EPSS score is unavailable and the vulnerability is not listed in the CISA KEV catalog, there is currently no evidence of widespread exploitation, although the inherent cross‑site nature suggests that a determined threat actor could deploy it easily. Hence, the risk for organizations remains significant, especially where operators regularly access the kiosk without additional protective controls.