CVE-2016-10645

CVE-2016-10645 describes a critical vulnerability in the grunt-images plugin, affecting grunt-images_project, where it insecurely downloads binary resources over HTTP. This allows for Man-in-the-Middle (MITM) attacks, enabling an attacker to swap legitimate binaries with malicious ones. With a CVSS score of 8.1 (High), the vulnerability presents a significant risk of remote code execution (RCE) with high impact on confidentiality, integrity, and availability, requiring high attack complexity but no user interaction. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.