Control Center Express Agent
Missing authentication for a critical function allows an unauthenticated nearby user to achieve remote code execution and control the host via a direct connection to the agent, provided the host has an active login session.