ClusterEngine is a cluster management programme created by Inspur on its own. Inspur ClusterEngine V4.0 has a Remote Code Execution flaw. A malicious hacker may send bogus login packets to the control server. It has been deemed critical. This flaw affects any unidentified processing of the Control Server portion. A privilege escalation vulnerability is created when an undefined input is manipulated.