A critical OS command injection vulnerability in tclahr UAC allows local attackers to execute arbitrary commands, threatening system integrity and data security.

This is an OS Command Injection (CWE-78) vulnerability within the parse_artifact.sh script, specifically regarding user substitution handling. The vulnerability allows an unauthenticated local attacker to execute arbitrary commands on the underlying operating system.

With a CVSS score of 7.8, this vulnerability represents a significant threat to organizational security. Successful exploitation could allow an attacker to bypass security controls, access sensitive artifact data, or gain persistent control over the host system, leading to severe reputational and operational damage.

Immediate Action: Patch the affected systems by updating tclahr uac to version 3.3.0 or later.

Proactive Monitoring: Monitor for anomalous script execution or unexpected output from the UAC parsing functions.

Compensating Controls: Implement file integrity monitoring and ensure that the UAC tool is run with the minimum necessary privileges to perform its collection tasks.

Public Exploit Available: Unknown

Immediate patching is required to address this vulnerability. Ensure all instances of the UAC tool are updated to version 3.3.0 to protect against potential exploitation of the parse_artifact.sh script.