A file upload vulnerability in Omnispace Agora Project before version 25.10 allows attackers to execute arbitrary code through the MSL engine of the Imagick library. The vulnerability can be exploited by uploading a specially crafted PDF file to the file upload and thumbnail functions. This represents a critical security flaw that enables remote code execution through image processing functionality. The vulnerability affects all versions prior to 25.10 and has been assigned CVE-2025-67079.