This vulnerability in Joomla! CMS involves insufficient input validation in the autoupdate server mechanism, which permits an attacker with high privileges to delete arbitrary files on the affected system. The affected versions include 4.0.0 to 5.4.3 and 6.0.0 to 6.0.3. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no user interaction, and high impact on confidentiality, integrity, and availability. The vulnerability could lead to destructive file deletion and potential system compromise. No patch or official remediation guidance is currently documented in the provided information.

Successful exploitation allows an attacker with high privileges to delete arbitrary files on the Joomla! CMS server, potentially causing data loss, service disruption, or system compromise. The high CVSS score reflects the serious impact on confidentiality, integrity, and availability. However, no known exploits have been reported in the wild so far.

Patch status is not yet confirmed — check the Joomla! Project vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the autoupdate mechanism and ensure only trusted administrators have high privileges. Monitor for updates from the vendor and apply patches promptly once released.