The vulnerability allows an attacker to inject malicious JavaScript into the BrowserAutomation::PlaywrightService component of ai-scanner, leading to execution of arbitrary code. This enables complete compromise of the system running the service, with full confidentiality, integrity, and availability impacts. The weakness is a classic code‑generation flaw identified as CWE‑94.

The affected product is ai-scanner by 0din‑ai. Versions from 1.0.0 up until, but not including, 1.4.1 are vulnerable. The scanner is used as an AI model safety tool built on NVIDIA garak.

The CVSS score of 9.9 indicates a critical severity, while the EPSS score is not available and the vulnerability is not yet listed in the CISA KEV catalog. The likely attack vector is remote, inferred from the fact that the service processes JavaScript code; an attacker would need to supply malicious script to the BrowserAutomation::PlaywrightService interface, which is presumed to be reachable over the network. With the provided impact, an exploit would lead to full control over the affected host.