The vulnerability CVE-2024-56058 affects the VRPConnector product by denniskravetstns, specifically versions up to 2.0.1. It involves deserialization of untrusted data, which allows an attacker to perform object injection. This can lead to remote code execution or other severe impacts due to the manipulation of serialized objects. The CVSS 3.1 base score is 9.8, reflecting a critical severity with network attack vector, no privileges or user interaction needed, and full impact on confidentiality, integrity, and availability. No official patch or vendor advisory is currently available to confirm remediation status.

Successful exploitation of this vulnerability could allow an unauthenticated attacker to remotely execute arbitrary code or manipulate the application state, resulting in complete compromise of the affected system's confidentiality, integrity, and availability. Given the critical CVSS score and the nature of object injection via deserialization, the impact is severe.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, avoid exposing VRPConnector instances to untrusted networks or inputs. Implement input validation and deserialization safeguards where possible. Monitor vendor channels for updates and apply patches promptly once available.