A crafted payload sent to the RemoteRegisterFunctionService endpoint (/remote/remote-register-function.service.ts) in Univer v1.0.0‑alpha.2 allows an attacker to execute arbitrary code on the host. The vulnerability permits remote code execution, which could compromise confidentiality, integrity, or availability of the system.

The flaw is present only in the Univer application version 1.0.0‑alpha.2. No other versions are listed as affected, and the CNA data does not provide additional vendor or product identifiers.

The vulnerability is classified as remote code execution with a CVSS score of 9.8 and an EPSS score of <1%, indicating a very low exploitation probability. It is not listed in CISA KEV, so publicly documented exploitation remains limited. Lack of an official patch means the risk persists until a remediation update is available. The endpoint is reachable via HTTP requests, so a malicious crafted payload could be delivered remotely if the service is exposed, potentially raising the likelihood of exploitation.