A taint-agnostic "unsafe reflection" flaw allows an unauthenticated caller to provide a dotted path that is resolved using __import__ and getattr, enabling the execution of arbitrary server-side code inside the /reindex API. The code can invoke any callable, including subprocess.getoutput, which results in full remote code execution and critical compromise of the host system. This constitutes a CWE‑94 vulnerability.

txtai versions up to and including 9.10.0 are affected. The flaw is exercised only when the /reindex endpoint is reachable without any authentication token and the configured index is writable. In deployments where a TOKEN is required or the index is read‑only, the vulnerability does not apply. The patch is delivered in commit 11b32da, which limits the endpoint to a new reindex configuration flag.

The CVSS score of 9.3 classifies this as a critical flaw. No EPSS score is currently provided, and the item is not listed in the CISA KEV catalog, but the conditions for exploitation are clear and straightforward for an attacker who has network access to the service. Exploitation requires only correctly configuring the vulnerable parameters; no special privileges or additional vectors are needed beyond connectivity to the unprotected endpoint. The remediation commit already mitigates the risk by gating the endpoint behind a configuration flag.