A critical remote code execution vulnerability in Piwigo versions 16.3.0 and earlier allows unauthenticated attackers to compromise the underlying server.

This vulnerability is an improper input validation flaw affecting the installer process. An unauthenticated attacker can supply malicious POST parameters that are written directly into a PHP configuration file, leading to arbitrary code execution upon system access.

Successful exploitation of this vulnerability grants an attacker full control over the affected web server. This could lead to complete data exfiltration, unauthorized modification of site content, and potential lateral movement within the network. Given the CVSS score of 9.8, this represents a critical risk to business continuity and data integrity.

Immediate Action: Upgrade to the latest version of Piwigo immediately to ensure the installer logic is corrected and input sanitization is properly enforced.

Proactive Monitoring: Review web server access logs for suspicious POST requests targeting the installation directory or unusual modifications to the database configuration file.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block malicious payloads within POST requests, specifically targeting PHP syntax injections.

Public Exploit Available: No

The severity of this vulnerability cannot be overstated. Organizations running Piwigo must prioritize patching to the latest version, as the lack of authentication requirements makes this an attractive target for automated exploitation. Apply the vendor-provided update immediately to mitigate the risk of a full system compromise.