CVE-2024-25600 is an improper control of code generation vulnerability (CWE-94) in Bricks Builder by Codeer Limited, allowing unauthenticated remote attackers to perform code injection. This affects all versions up to 1.9.6. The vulnerability has a CVSS 3.1 base score of 10.0 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H), indicating that exploitation requires no privileges or user interaction, and results in complete compromise of confidentiality, integrity, and availability. No patch or official remediation has been published yet, and the product is not a cloud service, so users must manage remediation themselves.

Successful exploitation of this vulnerability allows remote attackers to execute arbitrary code on affected systems without any authentication or user interaction, leading to full system compromise including complete loss of confidentiality, integrity, and availability of the affected environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or removing the affected Bricks Builder plugin versions if feasible. Monitor vendor communications closely for updates and apply patches immediately once available.