reNgine version 2.2.0 suffers from an authenticated command injection vulnerability.