Skip to content
OpenAdvisories
Medium · 4.8 CVE-2026-108941 EUVD-2026-98170GHSA-cv7j-p3c2-ggx8

Linketic CityGaussian Sidecar Parsing common.py parse_cfg_args code injection

Published Oct 12, 2026 · Updated Oct 15, 2026 · Assigned by VulDB

Description

A vulnerability was identified in Linketic CityGaussian up to 2.0. This affects the function parse_cfg_args of the file internal/utils/common.py of the component Sidecar Parsing. The manipulation of the argument cfg_args leads to code injection. The attack can only be performed from a local environment. The project was informed of the problem early through an issue report but has not responded yet.

Affected products

VendorProductAffectedFixed
Linketic CityGaussian 2.0 —

References