Periphery, an agent for the Komodo server management platform, has a critical vulnerability in versions up to 2.2.0. This vulnerability lies in the improper validation of container names, allowing OS command injection. Attackers can exploit this through container destruction or container log searches. By providing a specially crafted container name, an authenticated attacker can execute arbitrary commands as the root user. This compromise grants persistent control over the underlying host system. Komodo is an open-source server and deployment manager used in self-hosted and Docker multi-server setups. Periphery is the agent that allows Komodo to manage Docker environments on these servers. The vulnerability arises because container names are directly inserted into shell commands without proper escaping or validation. These commands, executed with Periphery's root privileges, provide a direct pathway for exploitation. The impact is significant, enabling attackers to gain root access, establish persistence, and compromise the entire managed infrastructure. Fortunately, Komodo has released a patch for this issue, with versions 2.3.0 and above being secure. Users are strongly advised to update their Komodo installations immediately to mitigate this risk.