Root command execution means an attacker can run commands as root, the highest privilege level on a Unix-like system. At that level, commands can change system files, install software, disable security controls, read protected data, and create hidden accounts. It is more dangerous than ordinary remote code execution because the attacker is not limited by normal user permissions.
In cyber attacks, root command execution often appears after a vulnerability lets an attacker break out of a parser, service, or application sandbox and reach privileged code. Security appliances are especially sensitive because they are trusted, internet-facing, and often process untrusted input. Defenders treat any path to root as a critical incident: patch immediately, review logs for unusual process launches, and check for altered settings or persistence.