The vulnerability of the texlive-base package in the TeX Live system allows a perpetrator to execute arbitrary commands.

The vulnerability of the texlive-base package in the TeX Live system is related to the inclusion of the mpost command in the list of commands allowed to be executed from the original TeX code. The mpost command allows for the execution of other programs during the compilation of TeX documents...