Technical impact
The vulnerability resides in the Sed Command Filter component of Z.ai Zcode versions up to 3.14.3 and 3.15.1. By manipulating the filter, an attacker can inject arbitrary operating system commands, resulting in remote code execution. The flaw permits exploitation over the network and has already been disclosed to the public, indicating that it can be actively used by adversaries.
Affected Systems
Z.ai Zcode products, specifically versions 3.14.3 and earlier, and 3.15.1 and earlier. The vulnerable functionality concerns the Sed Command Filter component, though the exact subsystem is not fully specified.
Risk and Exploitability
The CVSS score of 5.3 indicates moderate severity, and the EPSS score of 1% suggests a low but non-negligible likelihood of exploitation; the absence from the KEV catalog does not diminish the potential for exploitation. Because the description states that remote exploitation is possible and the exploit has been publicly disclosed, the likely attack vector is remote input via the Sed Command Filter interface. An attacker could achieve full control of the underlying operating system if the filter is processing untrusted input.
