The vulnerability CVE-2025-49414 affects FW Gallery by Fastw3b LLC and allows attackers to upload files of dangerous types without restriction. This can enable execution of malicious files on the server, leading to full compromise of the affected system. The issue impacts all versions up to 8.0.0. The CVSS 3.1 vector indicates it is remotely exploitable without authentication or user interaction, with critical impact on confidentiality, integrity, and availability. No patch or vendor advisory is currently available to confirm remediation status.

Successful exploitation of this vulnerability can result in complete compromise of the affected FW Gallery installation, including unauthorized code execution, data theft, data modification, and service disruption. The critical CVSS score reflects the high risk of remote exploitation without any required privileges or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling file upload functionality or restricting upload types through other means if possible. Monitor vendor channels for updates and apply patches promptly once available.