This vulnerability, identified as CWE-94 (Improper Control of Generation of Code), affects the Mesalvo Meona Client Launcher and Server Components. It allows attackers with limited privileges and user interaction to execute arbitrary code on other users' systems due to insufficient control over code generation. The CVSS 3.1 vector indicates network attack vector, low attack complexity, requiring privileges and user interaction, with scope changed and high impact on confidentiality, integrity, and availability. The affected versions are specified up to mid-2020 for the client and early 2025 for the server component. No patch or official remediation level has been published by the vendor as of the publication date.

Successful exploitation can lead to remote code execution on other users' systems, compromising confidentiality, integrity, and availability of affected systems. Given the critical CVSS score of 9.0, the vulnerability poses a severe risk if exploited. However, there are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, limit exposure by restricting access to the affected components and minimizing privileges of users interacting with the Meona Client Launcher and Server Components. Monitor vendor channels for updates on patches or official mitigations.