Remote Code Execution (RCE)

karma-mojo is vulnerable to remote code execution (RCE). The attack exists because the argument config in the function grep can be manipulated by attacker using malicious code as it was not sanitized before execution.