CVE-2019-13637

CVE-2019-13637 is a critical vulnerability affecting LogMeIn join.me versions prior to 3.16.0.5505, allowing for arbitrary command execution. This flaw stems from unsafe search paths in the application's Windows URI definition, which an attacker could exploit by tricking a user into clicking a malicious link. The vulnerability carries a high CVSS score of 8.8, indicating a network-based attack with low complexity, requiring user interaction, and leading to high confidentiality, integrity, and availability impacts. Despite its severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage.