CVE-2016-10532

CVE-2016-10532 is a critical authentication bypass vulnerability affecting console-io versions 2.2.13 and earlier, a module used for implementing web consoles. An unauthenticated attacker can exploit this flaw to execute arbitrary commands with the privileges of the user running the console-io application, potentially leading to full system compromise if run as root. This vulnerability stems from the application's failure to configure socket.io for authentication. While rated 9.8 Critical on CVSSv3, there is no evidence of active exploitation, public exploit code, or significant community discussion.