A critical command filtering vulnerability in the InfCode terminal auto-execution module allows for arbitrary code execution through malicious file imports.

The vulnerability exists due to a flawed blacklist mechanism and inadequate semantic parsing in the terminal auto-execution module. An unauthenticated attacker can execute arbitrary PowerShell commands on a victim's machine simply by having the user import and view a specially crafted file in the integrated development environment.

The impact of this vulnerability is severe, as it allows for full arbitrary command execution and sensitive data leakage on the host system. With a CVSS score of 7.8, this flaw represents a significant risk to organizational integrity, as successful exploitation could lead to total system compromise and unauthorized access to proprietary data.

Immediate Action: Consult the official InfCode security advisory and apply all available security patches or updates provided by the vendor.

Proactive Monitoring: Review system access logs for unusual PowerShell activity or unauthorized command execution patterns originating from the IDE.

Compensating Controls: Restrict the ability to import or execute untrusted files within the IDE and enforce strict endpoint security policies to block unauthorized PowerShell execution.

Public Exploit Available: No

Given the high CVSS score and the presence of a proof-of-concept, users should treat this vulnerability with high priority. Organizations using the affected software must monitor official vendor channels for a patch and implement the recommended compensating controls immediately to prevent potential remote code execution and data loss.