The vulnerability identified as CVE-2025-50324 affects OneCommander version 3.96.0.0. It permits remote code execution through the OneCommander.exe component. The available data does not specify the attack vector, exploitation method, or impact scope beyond arbitrary code execution. No patch or remediation details have been provided, and there is no indication of active exploitation in the wild.

Successful exploitation could allow a remote attacker to execute arbitrary code on the affected system, potentially leading to full system compromise depending on the privileges of the OneCommander.exe process. However, without additional details, the exact impact scope remains unclear.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution when running OneCommander version 3.96.0.0, especially when interacting with untrusted data or networks.