Krayin CRM v2.2.x is vulnerable to an authenticated remote code execution (RCE) vulnerability. This means that an attacker who can authenticate to the system can execute arbitrary code remotely, potentially compromising the server hosting the CRM. The vulnerability affects version 2.2.x, but no further details on the exploit mechanism or affected components are provided. There is no information about available patches or vendor advisories.

Successful exploitation of this vulnerability could allow an authenticated attacker to execute arbitrary code on the server running Krayin CRM v2.2.x. This could lead to full system compromise, data theft, or disruption of service. Since the attacker must be authenticated, the risk is limited to users with valid credentials or those who can obtain them.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, restrict access to authenticated users and monitor for suspicious activity. Consider limiting user privileges to reduce the risk of exploitation.