The AI Engine WordPress plugin versions prior to 3.6.6 do not properly restrict pathname inputs before reading files and forwarding their contents to an external service. This improper limitation of a pathname (CWE-22) enables users with subscriber-level privileges to read arbitrary server files and exfiltrate them, contingent on enabling a non-default public API feature. If this feature is not enabled, the vulnerability remains exploitable by administrators, which on multisite setups allows subsite administrators without super admin privileges to access sensitive network configuration data.

An attacker with subscriber-level access can read arbitrary files on the server and exfiltrate their contents if a specific public API feature is enabled. Otherwise, administrators, including subsite administrators on multisite WordPress installations, can exploit this flaw to access sensitive network configuration files and secrets. This can lead to information disclosure but does not directly impact integrity or availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider disabling the non-default public API feature to reduce risk. Restrict administrative privileges carefully, especially on multisite installations, to limit exposure.