The vulnerability allows unauthenticated attackers to execute arbitrary code on the target system. The issue is caused by improper handling of user input, which allows an attacker to inject malicious code and execute it in the context of the application.