Design/Logic Flaw

with only one user interactiondownload a malicious config, attackers can gain full command execution on the victim system...