IBM App Connect Enterprise versions 13.0.1.0 through 13.0.8.0 and 12.0.1.0 through 12.0.12.27 contain a vulnerability that allows a local attacker to execute arbitrary code. This is due to improper neutralization of special elements used in operating system commands, which could lead to command injection. The vulnerability has a high severity rating with a CVSS score of 7.8.