Product
Authenticated users can achieve remote code execution in openEQUELLA versions prior to 2026.1.0 by leveraging an unsandboxed FreeMarker configuration to execute arbitrary system commands.