An issue in Wgcloud 3.6.4 allows a remote attacker to escalate privileges via the content parameter is directly concatenated to the ProcessBuilder. (CVE-2026-52473)

The vulnerability in Wgcloud 3.6.4 involves unsafe handling of the content parameter, which is directly concatenated into a ProcessBuilder command. This improper input handling can be exploited remotely to escalate privileges on the affected system. No further technical details or exploitation methods are provided.

A remote attacker can leverage this vulnerability to escalate privileges, potentially gaining higher-level access than intended. This could lead to unauthorized actions on the affected system. No evidence of active exploitation in the wild is reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is available at this time.