An OS command injection vulnerability exists in Progress Software WS_FTP Server on Windows versions prior to 2024.0.7 and 2025.0.4. This flaw could allow an attacker with limited privileges to execute arbitrary commands, potentially leading to full system compromise. The vulnerability is rated critical with a CVSS score of 9.9.