A critical vulnerability (CVE-2026-9645) allows authenticated users to create and execute arbitrary JavaScript code on affected servers. The vulnerability exposes methods that enable complete system compromise as the malicious scripts execute with full administrative privileges, running commands as root. This represents a severe security risk as it provides attackers with unrestricted access to the underlying system once they have authenticated access to the application.