OpenElec versions 6.0.3 and 7.0.1 suffer from a remote code execution vulnerability.