Remote Code Execution (RCE)

tree-kill is vulnerable to remote code execution (RCE). The attack is possible because the process in window part does not validate the user input part before the concatenation of the input with a command using + operator and directly execute the command, allowing a remote user to inject arbitrary command through it.