A critical OS command injection vulnerability in getomni-ai zerox allows unauthenticated remote attackers to execute arbitrary system commands, posing a severe risk of complete system compromise.

The application fails to sanitize file extensions derived from document URLs before interpolating them into shell commands executed by poppler utilities. This allows an unauthenticated attacker to inject malicious shell syntax into the URL, leading to command injection during the document processing phase.

The ability to execute arbitrary OS commands on the host server provides an attacker with full control over the application environment. This can lead to unauthorized access to sensitive data, lateral movement within the network, and complete system takeover. Given the CVSS score of 9.8, this vulnerability is classified as critical, as it requires no authentication and can be triggered remotely with minimal effort by the attacker.

Immediate Action: Update getomni-ai zerox to the latest available version once a patch is released by the vendor. If no patch is currently available, restrict access to the application or disable the file processing functionality until a secure update is applied.

Proactive Monitoring: Review application and system access logs for unusual URLs containing shell metacharacters such as backticks, semicolons, or pipe operators. Monitor for unexpected child processes spawned by the zerox service.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block suspicious URL patterns and prevent the submission of payloads containing command injection sequences. Ensure the application runs with the least privilege necessary to limit the impact of potential command execution.

Public Exploit Available: Unknown

This vulnerability represents a significant security risk due to the potential for unauthenticated remote code execution. Administrators should prioritize identifying instances of zerox within their environment and prepare for an immediate update. Given the severity, organizations should implement strict network-level egress filtering and monitor for any signs of unauthorized command execution while awaiting a vendor-supplied patch.