CVE-2026-108941

MEDIUMCVSS 4.8

Description

A vulnerability was identified in Linketic CityGaussian up to 2.0. This affects the function parse_cfg_args of the file internal/utils/common.py of the component Sidecar Parsing. The manipulation of the argument cfg_args leads to code injection. The attack can only be performed from a local environment. The project was informed of the problem early through an issue report but has not responded yet.

Timeline

Published:October 13th, 2026 12:17 AM

Last modified:October 15th, 2026 4:17 PM

CVSS Scoring

CVSS v3: 4.8 (MEDIUM)

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

CVSS v2: 4.3

Weaknesses (CWE)

CWE-74 CWE-94

References & Reports

Advisories, patches, and third-party reports

https://github.com/Linketic/CityGaussian/
https://github.com/Linketic/CityGaussian/issues/206
https://vuldb.com/cve/CVE-2026-108941
https://vuldb.com/submit/997639
https://vuldb.com/vuln/416766
https://vuldb.com/vuln/416766/cti

Source: NIST NVD · Data may lag official sources by up to one minute