The vulnerability CVE-2025-32206 affects LABCAT Processing Projects up to version 1.0.2 and involves unrestricted upload of files with dangerous types, such as web shells. This allows an attacker with high privileges to upload malicious files to the web server, potentially resulting in complete system compromise. The CVSS 3.1 vector indicates network attack vector, low attack complexity, high privileges required, no user interaction, and impacts on confidentiality, integrity, and availability with scope changed. No patch or mitigation details are currently available from the vendor.

Successful exploitation of this vulnerability can lead to full compromise of the affected web server, including unauthorized code execution, data theft, and service disruption. The attacker must have high privileges to exploit this issue. The vulnerability impacts confidentiality, integrity, and availability of the system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict high-privilege user access and monitor for suspicious file uploads. Avoid exposing vulnerable versions in public-facing environments.