This vulnerability in Halyra CDI permits an attacker with high privileges to upload files of dangerous types without restriction. This can lead to severe impacts including full system compromise. The affected versions are from an unspecified initial version through 5.5.3. The CVSS 3.1 vector indicates network attack with low complexity, no user interaction, and scope change, resulting in high confidentiality, integrity, and availability impacts. No known exploits are reported in the wild, and no patch or official remediation details are currently available.

Successful exploitation can lead to complete compromise of the affected system's confidentiality, integrity, and availability. An attacker could upload malicious files that may execute arbitrary code, disrupt service, or exfiltrate sensitive data. The vulnerability requires high privileges to exploit but does not require user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the upload functionality to trusted users only and monitor for suspicious file uploads. Avoid exposing the vulnerable service to untrusted networks where possible.