An issue in the gateway server component of mpush version 0.8.1 permits the execution of arbitrary code when an attacker sends a specially crafted broadcast message. The flaw arises because the gateway processes these messages without performing appropriate validation or sanitization before executing content. Based on the description, it is inferred that the malicious payload would be executed with the same privileges as the gateway process, providing full control over the affected server.

The vulnerability affects mpush gateway servers running version 0.8.1. No additional vendor or product details are available beyond the name of the mpush gateway component.

The CVSS score is 9.8, reflecting critical severity. The EPSS score is less than 1%, indicating low current exploitation probability. The vulnerability is not listed in the CISA KEV catalog. An attacker appears to need network access to the gateway’s broadcast interface; based on the description it is inferred that sending a crafted broadcast message over the network can trigger the flaw. Since any host that can reach the broadcast interface could potentially exploit the issue, the risk remains high‑risk remote code execution.