This vulnerability (CWE-434) in Jordy Meow AI Engine: ChatGPT Chatbot allows users with high privileges to upload files without proper restrictions on file types. Such unrestricted file uploads can lead to execution of malicious code or other severe impacts. The affected versions include all versions up to 2.2.63. The CVSS 3.1 base score is 9.1 (AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H), reflecting network attack vector, low attack complexity, required high privileges, no user interaction, scope change, and high impact on confidentiality, integrity, and availability. No patch or official remediation level has been disclosed by the vendor. The product is not a cloud service, so remediation depends on vendor updates or user action.

Successful exploitation could allow an attacker with high privileges to upload and execute malicious files, resulting in full compromise of the affected system's confidentiality, integrity, and availability. This could lead to unauthorized data access, data modification, or denial of service. The vulnerability is rated critical due to the high CVSS score and broad impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict file upload permissions to trusted users only and implement manual or third-party file validation controls if possible. Monitor for updates from Jordy Meow regarding patches or mitigations. Avoid exposing the upload functionality to untrusted users.