An argument injection vulnerability in the ad-hoc RRD graph feature of OpenNMS Meridian and Horizon allows low-privileged authenticated users to inject extra rrdtool arguments. This can lead to server-side request forgery and unauthorized local file reads. The vulnerability does not allow arbitrary OS command execution due to the use of exec with argument arrays and no shell. Fixed versions are available that validate input parameters against allowlists.