Product
An authenticated command injection vulnerability (CVE-2026-63725) in sysPass allows administrative users to execute arbitrary OS commands through unsanitized backup path configurations.