The flaw lies in the terminalManager.spawn function within the terminal handler component, where manipulation of the cwd argument bypasses authorization checks. This causes an attacker to be able to spawn terminal processes with unrestricted working directories, effectively allowing them to execute arbitrary commands on the host. The weakness maps to improper privileges and authorization failures. The reported CVSS of 5.3 indicates moderate severity, but the nature of the impact can compromise confidentiality, integrity, and availability if lateral movement is achieved. The description explicitly states the vulnerability is exploitable remotely and the public has disclosed the exploit.

BlackBeltTechnology’s pi‑agent‑dashboard, versions up to 0.8.0, are affected. The vulnerable code resides in packages/server/src/browser-handlers/terminal-handler.ts. All deployments that expose the dashboard over an untrusted network or that rely on the default terminal interface are at risk unless the patch is applied.

The CVSS score of 5.3 marks it as a moderate risk, and although EPSS data is not available, the existence of a publicly released exploit indicates that attackers could actively target vulnerable installations. The lack of KEV listing means it is not formally catalogued as a known exploited vulnerability, but the remote attack vector and public disclosure raise the likelihood of exploitation, especially in environments lacking proper network segmentation or authentication. The improper authorization comes from the misuse of the cwd parameter, and attackers can trigger this path by sending crafted requests to the dashboard’s terminal endpoint.