CVE-2026-108941 — Linketic CityGaussian Sidecar Parsing common.py parse_cfg_args code injection
A vulnerability was identified in Linketic CityGaussian up to 2.0. This affects the function parse_cfg_args of the file internal/utils/common.py of the component Sidecar Parsing…
Published: 2026-10-12 · CVSS: 2.4 · CVSS 4.0
A vulnerability was identified in Linketic CityGaussian up to 2.0. This affects the function parse_cfg_args of the file internal/utils/common.py of the component Sidecar Parsing. The manipulation of the argument cfg_args leads to code injection. The attack can only be performed from a local environment. The project was informed of the problem early through an issue report but has not responded yet.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7