SmarterTools SmarterMail contains a missing authentication vulnerability in the ConnectToHub API method that could allow attackers to execute OS commands. The vulnerability enables attackers to point the SmarterMail instance to a malicious HTTP server that serves malicious OS commands, potentially leading to command execution on the affected system. This represents a critical security flaw that bypasses authentication controls for a critical function.