The vulnerability CVE-2025-49414 in FW Gallery by Fastw3b LLC allows an attacker to upload files of dangerous types without restriction. This can lead to execution of malicious code or other harmful actions on the affected system. The issue affects all versions up to 8.0.0. The CVSS 3.1 score of 10.0 reflects the critical nature of this vulnerability, with an attacker able to exploit it remotely without authentication or user interaction, causing complete compromise of confidentiality, integrity, and availability.

Successful exploitation of this vulnerability can result in full system compromise, including unauthorized disclosure, modification, or destruction of data. The attacker can remotely upload malicious files that may be executed or otherwise abused, severely impacting the affected system's security posture.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are currently available. Until a patch is released, restrict access to the upload functionality, implement strict file type validation, and monitor for suspicious activity related to file uploads.