Aperi'Solve versions before 3.2.1 allow unauthenticated OS command injection through an unsanitized password parameter passed into an expect command executed by bash. This leads to root-level remote code execution inside the worker container. The container's network configuration with unauthenticated PostgreSQL and Redis services allows further lateral movement and data compromise. Host compromise is possible if Docker socket or host volume mounts exist. The issue is addressed in version 3.2.1.

An unauthenticated attacker can gain root-level remote code execution inside the worker container, enabling full read/write access to sensitive user data including images, analysis results, and plaintext passwords. The attacker can also pivot to unauthenticated PostgreSQL and Redis services on the Docker network to dump databases or manipulate job queues. If Docker socket or host volume mounts are configured, the attacker may escalate to full host compromise and deface the website. This represents a critical security risk to confidentiality, integrity, and availability of the system and data.

This vulnerability is fixed in Aperi'Solve version 3.2.1. Users should upgrade to version 3.2.1 or later to remediate this issue. No other official remediation or temporary fixes are documented. Patch status is not explicitly stated beyond the fix in 3.2.1; verify with the vendor advisory for the latest guidance.