A vulnerability exists in AD‑Security AD_Miner 1.9.0 within the analyse_cache.py script’s request_a function. The function processes the first command‑line argument sys.argv[1] and directly deserializes it without validation. A crafted argument can cause arbitrary code execution when the script runs. The flaw is identified as CWE‑502 (Deserialization of Untrusted Data) and CWE‑20 (Improper Input Validation).

The issue affects only AD‑Security AD_Miner version 1.9.0. Systems hosting this specific release and running the analyse_cache.py script—typically administrators or users with script execution rights—are potentially vulnerable. No other product versions are identified.

The CVSS score is 4.8, rating the vulnerability as moderate. EPSS is under 1%, indicating a low likelihood of exploitation at present. The vulnerability is not listed in CISA KEV, so no known active exploitation is reported. Deserialization occurs only when the script is executed locally; thus a local attacker or someone able to run the script is needed. The pull request containing the fix remains unmerged, so the vulnerability remains present until a patched release is issued.