The vulnerability resides in the borg_restore.cgi script of the AUTOM8N WHM/cPanel plugin. An attacker can inject and execute arbitrary shell commands on the host system, giving full control of the underlying operating system. This constitutes a complete compromise of confidentiality, integrity, and availability for the affected server.

The flaw affects installations of the AUTOM8N plugin that contain commit 82821f7 or any earlier code. The plugin is used within the WHM/cPanel web hosting control panel environment and is typically deployed on Linux-based servers.

The EPSS score is 2%, and the vulnerability is not listed in the CISA KEV catalog, indicating a low expected exploitation probability at present. The CVSS score is 9.8, reflecting a critical severity. The nature of the flaw—remote command execution via a web‑accessible CGI script—implies a high potential impact if an attacker can reach the endpoint. Based on the description, the likely attack vector is remote through the WHM/cPanel web interface, potentially requiring authenticated administrative access or any user if the script is publicly accessible.