CVE-2024-31390 is an improper control of code generation (CWE-94) vulnerability in Soflyy Breakdance versions up to 1.7.2. It allows an attacker with low privileges to inject and execute arbitrary code remotely without user interaction. The vulnerability has a critical CVSS 3.1 score of 9.9, reflecting high impact on confidentiality, integrity, and availability. No patch or official remediation level has been disclosed by the vendor or in the advisory data.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code remotely, leading to complete compromise of the affected system's confidentiality, integrity, and availability. Given the critical CVSS score and the nature of code injection, the impact is severe, potentially enabling full system takeover or data breach.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the affected Breakdance installations to trusted users only and monitor for suspicious activity related to code injection attempts. Avoid exposing the vulnerable application to untrusted networks.