An issue in NoMachine before v8.2.3 allows malicious users to execute arbitrary commands via a crafted .nxs file.
nomachine nomachine