Packetfence 13.2.0 contains a vulnerability in its WebGui interface settings that permits authenticated users to perform remote code execution. The CVSS 3.1 base score is 8.8, reflecting high impact with network attack vector, low attack complexity, and no user interaction required. The vulnerability is related to CWE-79, which typically involves injection flaws such as cross-site scripting. No vendor advisory or patch information is currently provided, and the vulnerability is limited to exactly version 13.2.0.

Successful exploitation allows an authenticated attacker to execute arbitrary code remotely, potentially leading to full system compromise. The vulnerability impacts confidentiality, integrity, and availability, as indicated by the CVSS vector (C:H/I:H/A:H). This could result in unauthorized control over the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the WebGui interface to trusted users only and monitor for suspicious activity. Avoid exposing the interface to untrusted networks.