A command injection vulnerability exists in the PPTP VPN Clients on ADM versions 4.1.0 through 4.3.3.RR42 and 5.0.0 through 5.1.2.REO1. This flaw allows an administrative user to escape the restricted web environment and execute arbitrary code on the underlying operating system, leading to full system compromise.