This vulnerability in Tenable Security Center involves command injection (CWE-78) where an authenticated administrator can alter application configuration settings to trigger arbitrary command execution on the host OS during certain backend operations. The CVSS 3.1 score is 7.2 (High), reflecting network attack vector, low attack complexity, high privileges required, no user interaction, and full confidentiality, integrity, and availability impact. No affected versions or patch information are provided in the available data.

An attacker with authenticated administrator privileges can execute arbitrary commands on the underlying operating system, potentially leading to full system compromise including confidentiality, integrity, and availability impacts.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict administrator access to trusted personnel only and monitor for suspicious configuration changes.