This vulnerability in Namaste! LMS versions up to 2.6.3 is caused by unsafe deserialization of untrusted data, enabling object injection attacks. Such attacks can allow an attacker with low privileges to execute arbitrary code or manipulate application logic, resulting in full compromise of the system's confidentiality, integrity, and availability. The CVSS 3.1 base score is 8.8, reflecting network attack vector, low attack complexity, no user interaction, and high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available, and the product is not a cloud service.

Successful exploitation can lead to full system compromise, including unauthorized disclosure, modification, or destruction of data and disruption of service. The vulnerability affects all installations of Namaste! LMS up to and including version 2.6.3. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is released, restrict access to the affected application to trusted users only and monitor for suspicious activity related to deserialization processes. Avoid exposing the LMS to untrusted networks or users. Follow vendor communications closely for updates on fixes.