# Details of latest 2023 Remote Code Execution Vuln

**URL:** <https://forum.inductiveautomation.com/t/details-of-latest-2023-remote-code-execution-vuln/70115>\
**Category:** Ignition Early Access\
**Created:** [February 21, 2023, 3:06pm UTC](https://forum.inductiveautomation.com/t/details-of-latest-2023-remote-code-execution-vuln/70115 "2023-02-21T15:06:48Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [February 21, 2023, 3:06pm UTC](https://forum.inductiveautomation.com/t/details-of-latest-2023-remote-code-execution-vuln/70115/1 "2023-02-21T15:06:48Z")

</div>

Continuing the discussion from [Nightly 8.1 Changelogs - 2023](https://forum.inductiveautomation.com/t/nightly-8-1-changelogs-2023/68524/20):

Does IA have any guidance on affected modules and/or version ranges to share with our clients? Or possible mitigations before the fix becomes a release? v8.1.25 is only a week old, which suggests the formal release with the fix is three or four weeks away.

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [February 21, 2023, 3:17pm UTC](https://forum.inductiveautomation.com/t/details-of-latest-2023-remote-code-execution-vuln/70115/2 "2023-02-21T15:17:23Z")

</div>

Avoid using the Quick Client with untrusted servers.

Edit: or any server that an adversary could control the value of Nodes in, I guess.
