A critical authentication bypass flaw in the ci4ms CMS skeleton permits unauthenticated attackers to achieve full application takeover by exploiting a failed installation route guard.

This vulnerability involves a missing authentication check (CWE-306) within the installation route guard. An unauthenticated attacker can trigger this flaw when the database is temporarily unreachable, causing the system to fail open and grant unauthorized access to the setup wizard.

The impact of this vulnerability is severe, as it facilitates full application takeover. Successful exploitation leads to total compromise of the application environment, including unauthorized access to sensitive data and potential loss of system integrity. With a CVSS score of 8.1, this represents a high-risk security event that could lead to significant operational disruption and data breach.

Immediate Action: Update the ci4ms package to version 0.31.4.0 or later immediately to resolve the installation route guard failure.

Proactive Monitoring: Monitor access logs for unauthorized requests directed at the installation or setup routes, particularly during periods of database instability.

Compensating Controls: Deploy a Web Application Firewall (WAF) to restrict access to setup or administrative installation endpoints to known, trusted management IP addresses.

Public Exploit Available: Unknown.

Given the potential for full application takeover, administrators must prioritize patching this vulnerability immediately. Ensure that the ci4ms component is updated to version 0.31.4.0 and verify that the .env file permissions are restrictive to prevent unauthorized modification. Failure to remediate this issue exposes the application to a trivial authentication bypass that requires no prior user privileges.