tpp 1.3.1 allows remote malicious users to execute arbitrary commands via a --exec command in a TPP template file.
andreas krennmair tpp 1.3.1