pnetlab version 5.3.11 contains a command injection vulnerability via the qemu_options parameter. This flaw allows an unauthenticated attacker to execute arbitrary commands on the affected system. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity level.