MiR software versions prior to 3.0.0 contain a command injection vulnerability that allows an authenticated user to execute arbitrary commands on the underlying operating system via a crafted HTTP request. This vulnerability has a high severity rating with a CVSS score of 8.8.