An issue in ttyd v.1.6.3 allows attacker to execute arbitrary code via default configuration permissions.