Vendor
Metalama's Visual Studio integration is vulnerable to arbitrary code execution due to unsafe deserialization of inter-process communication messages via predictable named pipes, requiring local access as the same user.