This vulnerability in termel PDF 2 Post (pdf2post) allows an attacker to perform remote code inclusion due to improper control over code generation. Affected versions include all releases up to 2.4.0. The CVSS 3.1 base score of 9.9 reflects network attack vector, low attack complexity, required privileges, no user interaction, and complete impact on confidentiality, integrity, and availability. No patch or official remediation details are provided in the available data.

Successful exploitation of this vulnerability could allow an attacker with network access and limited privileges to execute arbitrary code remotely, potentially leading to full system compromise including data theft, modification, or denial of service. The critical CVSS score indicates severe impact on confidentiality, integrity, and availability of affected systems.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to the affected software and monitor for suspicious activity related to PDF 2 Post. Avoid exposing the service to untrusted networks where possible.