The vulnerability allows an attacker who already has authenticated remote shell access to inject operating system commands. Once injected, these commands run with root privileges, giving the attacker full control over the host. The weakness is a classic operating system command injection and is classified under CWE-78.

TeamT5 ThreatSonar Anti‑Ransomware is the affected product. No specific version range is provided in the available data, so all installations of this software that do not include the hotpatch remain at risk.

The CVSS score of 8.7 indicates high severity. No EPSS value is published, so the likelihood of exploitation cannot be quantified from the data. The vulnerability is not listed in the CISA KEV catalog. An attacker needs authenticated remote shell access; if achieved, the elevation of privileges is straightforward and the impact is system‑wide takeover.