The vulnerability of the io.popen() function in the luatex-core.lua component of LuaTeX desktop publishing systems, such as TeX Live and MiKTeX, allows a malicious actor to execute arbitrary commands.

The vulnerability of the io.popen function in the luatex-core.lua component of LuaTeX desktop publishing systems such as TeX Live and MiKTeX is related to the lack of measures to sanitize input data. Exploiting this vulnerability allows an attacker to execute arbitrary commands...