An overlooked library contains a vulnerability that could enable full remote takeover simply by clicking a link.