lizparadox_ has discovered that the report name can be used to execute commands on the server . Impact CVSS v3.0 Base Score: 6.8 Attack Vector: Network Attack Complexity: Low Privileges Required: High User Interaction: Required Scope: Unchanged Confidentiality: High Integrity: High Availability: High Workaround There is no workaround. Resolution All affected users should upgrade trytond to the latest version.