This vulnerability is an unauthenticated SQL Injection (CWE-89) in GeekyBot versions <= 1.2.0. An attacker can exploit this flaw without any privileges or user interaction to execute arbitrary SQL commands. The CVSS 3.1 score of 9.3 reflects a network attack vector with low attack complexity, no privileges required, no user interaction, and a scope change. The impact is high confidentiality loss and low availability impact. No official fix or mitigation has been published yet, and no known exploits have been reported.

Successful exploitation can lead to unauthorized disclosure of sensitive data (high confidentiality impact) and partial disruption of service (low availability impact). Integrity impact is not indicated. The vulnerability can be exploited remotely without authentication, increasing its risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting network access to GeekyBot instances and monitor for unusual database activity. Avoid exposing vulnerable versions to untrusted networks.