A high-severity remote code execution vulnerability exists in libwebsockets due to improper validation of MQTT PUBACK packet data. This flaw allows unauthenticated remote attackers to write beyond allocated buffers, potentially executing arbitrary code within the affected process.