The vulnerability resides in the Sed Command Filter component of Z.ai Zcode versions up to 3.14.3 and 3.15.1. By manipulating the filter, an attacker can inject arbitrary operating system commands, resulting in remote code execution. The flaw permits exploitation over the network and has already been disclosed to the public, indicating that it can be actively used by adversaries.

Z.ai Zcode products, specifically versions 3.14.3 and earlier, and 3.15.1 and earlier. The vulnerable functionality concerns the Sed Command Filter component, though the exact subsystem is not fully specified.

The CVSS score of 5.3 indicates moderate severity, but the lack of an EPSS score and absence from the KEV catalog do not diminish the potential for exploitation. Because the description states that remote exploitation is possible and the exploit has been publicly disclosed, the likely attack vector is remote input via the Sed Command Filter interface. An attacker could achieve full control of the underlying operating system if the filter is processing untrusted input.