This vulnerability (CWE-22) in Jordy Meow Database Cleaner allows improper limitation of a pathname to a restricted directory, enabling relative path traversal attacks. The issue affects versions up to 1.0.5 and requires the attacker to have high privileges. The CVSS vector indicates network attack vector, low attack complexity, no user interaction, and impact on confidentiality only. No official fix or patch has been published yet.

An attacker with high privileges can exploit this vulnerability to read arbitrary files outside the intended directory scope, potentially exposing sensitive information. There is no indication of impact on integrity or availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the application to trusted users only and monitor for suspicious activity related to file access. Avoid exposing the vulnerable application to untrusted networks.