A jndi lookup pattern in logged data can trigger remote code execution via Log4j.
Upgrade Log4j and disable message lookups; never log unsanitized user input.