An authenticated remote code execution vulnerability exists in Krayin CRM versions >=2.2.0 and <2.3.0. This allows an attacker with valid credentials to execute arbitrary code on the server hosting the CRM application. The vulnerability is specific to the 2.2.x release series. No patch or official remediation guidance has been provided in the available data. No active exploitation has been confirmed.

Successful exploitation of this vulnerability could allow an authenticated attacker to execute arbitrary code on the server running Krayin CRM 2.2.x, potentially leading to full system compromise. This could result in data theft, service disruption, or further network penetration depending on the environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to authenticated users and monitor for suspicious activity related to this vulnerability.