The vulnerability CVE-2026-23802 affects Jordy Meow AI Engine versions up to 3.3.2 and allows users with high privileges to upload files of dangerous types without restriction. This unrestricted file upload can be exploited to introduce malicious files into the system, potentially resulting in full compromise of the affected system. The CVSS 3.1 vector indicates network attack vector, low attack complexity, required high privileges, no user interaction, and a scope change with high impact on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability can lead to complete compromise of the affected system, including unauthorized disclosure, modification, or destruction of data and disruption of service. The critical CVSS score reflects the severity of the impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict high-privilege user access and monitor file upload activities closely to mitigate risk.