A command injection vulnerability in the sandcat plugin of Caldera 2.3.1 and previous versions allows authenticated malicious users to execute any command or service.
mitre caldera