A critical security vulnerability has been discovered in OFFIS DCMTK up to version 3.7.0. The flaw affects the executeOnReception and executeOnEndOfStudy functions in the storescp component, specifically in the dcmnet/apps/storescp.cc file. Exploitation of this vulnerability can lead to OS command injection attacks. The vulnerability can be exploited remotely, making it particularly dangerous. A patch has been released with the identifier edbb085e45788dccaf0e64d71534cfca925784b8. Organizations using affected versions of DCMTK should immediately apply the available patch to mitigate this security risk.