CVE-2024-52959: Gss Iota C.ai

High severity, CVSS 7.2. EPSS: 0.6% chance of exploitation in the next 30 days.

A Improper Control of Generation of Code ('Code Injection') vulnerability in plugin management in iota C.ai Conversational Platform from 1.0.0 through 2.1.3 allows remote authenticated users to perform arbitrary system commands via a DLL file.

Affected products

• Gss Iota C.ai: from 1.0.0, up to and including 2.1.3

Published 2024-11-27. Last modified 2026-06-17.