Remote code execution vulnerability