CVE-2024-48779

CVE-2024-48779 is a critical remote code execution (RCE) vulnerability affecting Wanxing Technology's Yitu Project Management Software version 3.2.2. An unauthenticated attacker can exploit this by manipulating the 'platformpluginpath' parameter to specify a malicious Qt plugin loading directory. With a CVSS score of 9.8 (CRITICAL), this vulnerability allows for complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation, public exploit code, or KEV listing, the vulnerability has garnered significant community discussion, indicating potential interest from threat actors.