The vulnerability identified as CVE-2026-23802 affects Jordy Meow AI Engine versions up to 3.3.2. It involves an unrestricted file upload mechanism that does not properly restrict dangerous file types, allowing an attacker with high privileges to upload malicious files. This can lead to a complete compromise of the system's confidentiality, integrity, and availability. The CVSS v3.1 base score is 9.1, with attack vector network, low attack complexity, high privileges required, no user interaction, and scope changed, reflecting the critical nature of the vulnerability.

Successful exploitation of this vulnerability can result in full system compromise, including unauthorized disclosure of information, modification of data, and disruption of service. Because the attacker requires high privileges, the risk is primarily to users or processes with elevated access. No known exploits have been reported, but the potential impact is critical.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict high-privilege user access and monitor for suspicious file uploads. Avoid allowing untrusted users to upload files and implement additional file validation controls if possible.