This vulnerability involves OS command injection in the app.py file of openlabs docker-wkhtmltopdf-aas up to commit 9f50579. An attacker can exploit this by crafting a malicious POST request that triggers execution of arbitrary commands on the host system. The vulnerability is publicly disclosed but lacks a CVSS score, vendor advisory, or patch information. No known exploits have been reported in the wild.

Successful exploitation could allow an attacker to execute arbitrary commands on the system running the vulnerable component, potentially leading to full system compromise depending on the privileges of the application. However, no known exploits have been reported, and the extent of impact depends on the deployment context and privileges of the affected service.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid exposing the vulnerable component to untrusted networks or inputs. Monitor for updates from the vendor or project maintainers regarding patches or mitigations.