The vulnerability allows an attacker to upload a configuration file that includes a URI pointing to a malicious binary file. When the software processes this configuration file, it downloads and executes the binary, leading to remote code execution. This can result in the attacker gaining full control over the affected system.

An attacker sets up a malicious server hosting a binary file with embedded malicious code. They then craft a configuration file that points to this binary and upload it to the target system. When the target system processes the configuration file, it downloads and executes the malicious binary, allowing the attacker to execute arbitrary code on the system.

Users running version 2.17.1 of the software who allow remote configuration file uploads are affected by this vulnerability.