This vulnerability involves command injection in BYOB 2.0's payload build page. An attacker can supply a crafted build parameter that is processed insecurely in the freeze function of core/generators.py, resulting in arbitrary command execution on the server. The CVE entry does not provide affected version details, CVSS scoring, or remediation information. No known exploits have been reported to date.

Successful exploitation of this vulnerability would allow an attacker to execute arbitrary commands on the server hosting BYOB 2.0, potentially leading to full system compromise depending on the server's privileges. The lack of patch or mitigation details means the vulnerability remains unaddressed as per current information.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid exposing the vulnerable payload build page to untrusted users and consider implementing input validation or other protective controls to limit command injection risks.