zerox 1.1.20 contains an OS command injection vulnerability in the file download mechanism. The temporary file extension derived from document URLs is injected unsanitized into shell commands executed by Poppler utilities. An attacker can craft a document URL with a malicious file extension that includes command substitution syntax such as $(…) or `…`, which will be executed before the document is processed, leading to full compromise of the affected system.

The vulnerability affects getomni‑ai’s zerox package in version 1.1.20. Any installation that uses the file download functionality is at risk. No later versions are listed as affected in the current advisory.

The CVSS score of 9.3 indicates high severity for remote code execution. EPSS score of 3% indicates a low but non‑zero probability of exploitation, and the flaw is not listed in CISA’s KEV catalog, but the absence of known exploitation does not diminish the risk. Attackers can trigger this flaw remotely by supplying a crafted document URL to a vulnerable endpoint; because the injected file extension is passed to shell commands, the vulnerability is exploitable from a network‑facing entry point.