An authenticated remote code execution vulnerability in the DIRAC framework allows attackers to compromise the entire system through SQL injection and unsafe dynamic code evaluation.

The flaw exists in the FileCatalogHandler.py module, where user-supplied dataset names are interpolated into SQL queries without proper parameterization. This injection allows an authenticated attacker to manipulate the query result, which is then passed to a Python eval function, resulting in arbitrary code execution with the privileges of the DIRAC service.

Successful exploitation poses a critical risk to the organization as it grants the attacker complete control over the DIRAC environment. With a CVSS score of 9.9, this vulnerability enables the theft of sensitive configuration files, database credentials, and security tokens, while also facilitating the destruction of local audit logs. Such a compromise could lead to widespread data exfiltration and total loss of integrity for the distributed computing infrastructure.

Immediate Action: Upgrade to DIRAC versions 8.0.79, 9.0.22, or 9.1.10 respectively, depending on the currently deployed branch, to incorporate the necessary parameterization and security fixes.

Proactive Monitoring: Review application logs for unusual SQL query patterns or attempts to pass unexpected directives to the dataset management service.

Compensating Controls: Implement strict network segmentation and restrict access to the DIRAC management interfaces to authorized users only, while utilizing a Web Application Firewall to inspect traffic for common SQL injection sequences.

Public Exploit Available: No (exploit_available: unknown)

Given the critical severity of this vulnerability and the potential for full system takeover, administrators should prioritize patching immediately. Ensure that all DIRAC services are updated to the specified secure versions to eliminate the underlying code injection vector. Failure to remediate this flaw leaves the entire distributed computing framework exposed to unauthorized command execution.