CVE-2024-41799 in tgstation-server allows low-permission users with specific privileges to execute arbitrary code. This vulnerability involves setting malicious .dme files for compilation, potentially leading to remote code execution if the server is configured to run in BYOND's trusted security level. Although the CVSS score is 0, indicating a base score of 0, the SOCRadar Vulnerability Risk Score (SVRS) of 30 suggests a low but non-negligible risk due to its presence in vulnerability intelligence feeds. This issue arises because the vector bypasses expected security boundaries, potentially not requiring remote write access. Organizations using tgstation-server should upgrade to version 6.8.0 or later to mitigate the CWE-22 path traversal risk and prevent unauthorized code execution. While the CVSS score is low, the SVRS highlights that this vulnerability should not be ignored. This flaw presents a potential escalation path for malicious actors.