CVE-2024-49291 is an unrestricted file upload vulnerability (CWE-434) in Cooked Pro by Gora Tech LLC, affecting versions prior to 1.8.0. It allows attackers to upload files of dangerous types without restriction, potentially enabling remote code execution or other severe impacts. The CVSS v3.1 base score is 10.0, reflecting network attack vector, no required privileges or user interaction, and complete compromise of confidentiality, integrity, and availability. No patch or official remediation level is currently documented.

Successful exploitation can lead to full system compromise, including unauthorized disclosure, modification, or destruction of data and disruption of service. The vulnerability is critical due to its high CVSS score and the nature of unrestricted dangerous file uploads.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict file upload functionality where possible and implement strict validation and filtering of uploaded files as a temporary measure.