Code injection in playbook code snippet step

An improper control of generation of code ('Code Injection') vulnerability [CWE-94] in FortiSOAR may allow an authenticated attacker to execute arbitrary code on the host via a playbook code snippet.

arbitrary code attacker code code injection control cwe host injection may playbook vulnerability