The vulnerability resides in Fledge’s backup‑restore upload handler, where the filename of the first extracted tar member is inserted directly into a shell command without proper sanitization. A specially crafted file name such as "fledge_backup_$(id>/tmp/pwn).db" satisfies the weak prefix/suffix checks yet injects a shell substitution. Executing the command via os.system() allows an attacker to run arbitrary OS commands as the user the Fledge process runs under, leading to full compromise of the host system.

This flaw affects the Fledge IoT Gateway product, specifically the backup_restore.py component of the core API. All installations that have not applied the latest patches and that allow administrators to upload backup archives are vulnerable. The affected version range is not specified in the provided data, so any version prior to a fix should be considered at risk.

The CVSS score of 7.2 indicates a high impact, while EPSS data is not available, implying no known exploitation trend at the time of this analysis. The flaw is not listed in CISA’s KEV catalog. The attack likely requires an authenticated administrator with upload privileges; the vulnerability is not exploitable by unauthenticated or remote users unless they can trick an admin into uploading a malicious archive. Once a privileged user uploads such an archive, arbitrary command execution can be achieved with no additional prerequisites.