The bug can trigger remote code execution but only under certain, "unlikely" conditions.
Brief · Source report
Experts reveal another major PHP2Shell bug — and it's not getting an emergency patch this time

Brief · Source report

The bug can trigger remote code execution but only under certain, "unlikely" conditions.