An issue in Twenty CRM v1.15.0 and before allows a remote attacker to execute arbitrary code via the local.driver.ts module.

A critical remote code execution vulnerability has been identified in Twenty CRM version 1.15.0 and earlier versions. The vulnerability exists in the local.driver.ts module and allows remote attackers to execute arbitrary code on affected systems. This represents a high-severity security flaw that could enable complete system compromise. The vulnerability affects all versions up to and including v1.15.0 of the Twenty CRM application. Proof-of-concept code and detailed analysis have been published, increasing the risk of exploitation.