An OS command injection flaw in tclahr UAC exposes systems to unauthorized code execution and potential full system compromise.

This is an OS Command Injection (CWE-78) vulnerability located in the command_collector.sh script. The vulnerability allows an unauthenticated local attacker to execute arbitrary commands, provided they can influence the input processed by the script, subject to the user interaction constraint.

The vulnerability carries a CVSS score of 7.8, reflecting the high potential for total system compromise if exploited. Unauthorized code execution can lead to the exfiltration of sensitive artifacts collected by the tool, modification of system configurations, or complete loss of control over the affected host.

Immediate Action: Upgrade to tclahr uac version 3.3.0 or higher to incorporate the vendor-supplied fix.

Proactive Monitoring: Review audit logs for unusual shell commands or unexpected child processes originating from the UAC utility.

Compensating Controls: Apply principle of least privilege by ensuring the UAC tool is executed only by users who absolutely require it and in controlled, isolated environments.

Public Exploit Available: Unknown

Organizations should treat this vulnerability with high priority. Updating to version 3.3.0 is the only reliable way to prevent potential exploitation of the command_collector.sh script.