This vulnerability in Crocoblock JetEngine (<= 3.7.0) arises from unsafe deserialization of untrusted data, enabling code injection attacks. The CVSS 3.1 vector indicates network attack vector, high attack complexity, low privileges required, no user interaction, and a scope change with high impact on confidentiality, integrity, and availability. No known exploits are reported in the wild, and no patch or official remediation details are currently provided.

Successful exploitation could allow an attacker to execute arbitrary code within the context of the affected application, potentially leading to full compromise of the system running JetEngine. The vulnerability affects confidentiality, integrity, and availability of the system. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, avoid exposing vulnerable versions to untrusted networks and restrict access to trusted users only.