The vulnerability identified as CVE-2026-39506 affects Jordy Meow AI Engine (Pro) versions before 3.4.2. It is caused by missing authorization checks, leading to incorrectly configured access control security levels. This can allow an attacker with low privileges to gain unauthorized access to certain features or data within the application. The CVSS 3.1 base score is 4.3 (medium), with network attack vector, low attack complexity, requiring low privileges, no user interaction, and limited confidentiality impact. No official remediation or patch information is currently available, and no exploits have been observed in the wild.

The impact is limited to a confidentiality loss due to missing authorization controls, without affecting integrity or availability. An attacker with low privileges could potentially access data or functions they should not have access to, but the overall severity is medium. There are no reports of active exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is released, users should review and tighten access control configurations where possible to mitigate unauthorized access risks. Monitor Jordy Meow's official channels for updates.