Command execution vulnerability