Apparently, a bug has been found in bash and that has made servers using bash shells vulnerable.

(Read more here and here).

CF Server Shells should be upgraded, as fixes are being made.