The vulnerability is a signature validation bypass in the Cacti package import function. It allows an attacker to install self‑signed packages that normally must be authenticated, potentially enabling arbitrary code execution or the deployment of malicious extensions. This flaw is classified as CWE‑347.

Cacti 1.2.30 and earlier versions are affected. The issue is fixed in version 1.2.31 and later releases.

The CVSS score of 7.1 indicates high severity, while no EPSS score is available and the vulnerability is not listed in CISA KEV. The bypass can be exploited through the web interface where users upload packages; an authenticated user with import rights can upload a malicious package that bypasses signature checks. The attack vector is likely the web application, requiring local or authenticated access to the import feature. The overall risk remains significant for environments that allow package imports from untrusted sources.