The guardian language-system contains an OS command injection vulnerability due to improper neutralization of special elements in the id GET parameter. Specifically, speech.php uses exec() to run a PHP script with the id parameter directly concatenated into the command line, without sanitization or authentication. This enables unauthenticated remote attackers to execute arbitrary OS commands on the server, leading to a critical security risk. The CVSS 4.0 base score is 9.3, reflecting high exploitability and impact. No patch or official remediation is currently documented.

An unauthenticated remote attacker can execute arbitrary operating system commands on the server hosting the guardian language-system. This can lead to full system compromise, data theft, service disruption, or further attacks within the environment. The vulnerability has a critical severity rating with a CVSS score of 9.3, indicating a high likelihood of exploitation and severe impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, it is recommended to implement input validation and sanitization on the id parameter to prevent command injection. Restricting access to the vulnerable script and disabling the exec() call if possible can reduce risk. Monitor for updates from the vendor for an official patch or mitigation.