MotionEye versions 0.43.1b4 and earlier contain an OS command injection vulnerability that allows authenticated administrative users to achieve remote code execution.

This is an OS command injection vulnerability triggered by improper sanitization of user input within configuration parameters such as image_file_name. The flaw requires the attacker to possess administrative privileges to modify configuration files and trigger a service restart.

The ability to execute arbitrary OS commands on the underlying host represents a critical security risk. Successful exploitation grants an attacker full control over the MotionEye instance, potentially leading to total system compromise, exfiltration of surveillance data, and lateral movement within the network. The CVSS score of 7.2 reflects the high impact on confidentiality, integrity, and availability, despite the requirement for administrative authentication.

Immediate Action: Update the MotionEye package to version 0.43.1b5 or later to resolve the underlying input sanitization flaw.

Proactive Monitoring: Monitor system logs for unauthorized configuration changes and unexpected service restarts, which may indicate an attempt to weaponize this vulnerability.

Compensating Controls: Restrict administrative access to the MotionEye interface to trusted personnel only and implement network segmentation to limit the potential blast radius of a compromised instance.

Public Exploit Available: Yes, a public exploit is available through a Metasploit module and an ExploitDB entry.

Given the availability of weaponized exploit code and the high potential impact of remote code execution, this vulnerability poses a significant risk to your infrastructure. Administrators should prioritize upgrading to version 0.43.1b5 immediately. If an immediate update is not feasible, ensure that administrative access to the application is strictly controlled and audited to prevent unauthorized configuration modifications.