CVE-2020-12641 is a remote code execution vulnerability in Roundcube Webmail. It allows attackers to execute arbitrary code by injecting shell metacharacters into configuration settings related to im_convert_path or im_identify_path. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.