The Eugen Bobrowski Debug Tool suffers from a missing authorization vulnerability that permits unauthenticated attackers to upload arbitrary web shells to the web server hosting the tool. This vulnerability affects all versions up to and including 2.2. Exploitation requires no privileges or user interaction and can result in full system compromise, as indicated by the CVSS 3.1 base score of 10.0 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H). No official patch or vendor advisory has been published to date.

Successful exploitation allows an attacker to upload a web shell, which can lead to complete compromise of the affected web server. This includes full control over confidentiality, integrity, and availability of the system. Given the critical severity and the lack of required privileges or user interaction, this vulnerability poses a severe risk to affected deployments.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the Debug Tool interface to trusted users only and consider disabling or removing the tool from production environments to prevent exploitation.