An OS command injection vulnerability (CWE-94) exists in the media archiving and export pipeline component of kanishka-linux Reminiscence v0.3.0. This vulnerability allows remote attackers to execute arbitrary OS commands without authentication by providing specially crafted input. The CVSS 3.1 base score is 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), reflecting network attack vector, low attack complexity, no privileges or user interaction required, and full impact on confidentiality, integrity, and availability. No patch or remediation level has been published by the vendor as of the publication date. The vulnerability is publicly disclosed but no known active exploitation has been reported.

Successful exploitation allows unauthenticated remote attackers to execute arbitrary OS commands on the affected system, potentially leading to full system compromise, data theft, data destruction, or service disruption. The vulnerability impacts confidentiality, integrity, and availability at a high level.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected component and validate or sanitize all inputs to the media archiving and export pipeline component to mitigate exploitation risk.