A local code execution vulnerability in the Lymphatus caesium-image-compressor application allows local attackers with low privileges to achieve full system compromise.

This is a local execution flaw residing in the shutdownMachine and putMachineToSleep functions within PostCompressionActions.cpp, requiring low local privileges to exploit.

A successful exploit of this vulnerability could grant an unauthorized local user complete administrative control over the affected machine. This leads to total confidentiality, integrity, and availability loss for the host system. The CVSS score of 7.8 reflects a high severity threat that requires valid local access to execute.

Immediate Action: Review the official repository pull requests and apply the vendor patch or update to a commit beyond 02da2c6 as soon as available.

Proactive Monitoring: Monitor local system logs for unexpected execution of shutdown or sleep routines initiated by non-administrative user accounts.

Compensating Controls: Restrict local user access permissions on vulnerable workstations and servers to minimize the population of potential attackers who can reach the software interface.

Public Exploit Available: Yes, a published PoC exists, cited in the researcher advisory reference.

Given the high CVSS score and the potential for total system compromise, organizations utilizing this software must restrict local user permissions immediately. Administrators should monitor vendor repositories closely and apply code updates as soon as a secure release is published.