[blincoln]

Is the job submission handled securely?

I've seen plenty of systems along the lines of what you're describing where unauthenticated clients can submit jobs. Sometimes the developers even claim that's intentional. Either way, it's a vulnerability, because it compromises the underlying hosts.

[TallGuyShort]

Yes, and that's not what people are reporting flaws in. The reports are "this daemon accepts arbitrary code and then runs it!"