This vulnerability in NHR Options Table Manager allows an attacker with high privileges to exploit deserialization of untrusted data, leading to object injection. This can result in full compromise of confidentiality, integrity, and availability of the affected system. The issue affects all versions up to 1.1.2. No vendor advisory or patch information is provided, and the product is not a cloud service, so remediation depends on vendor updates or user mitigation.

Successful exploitation can lead to complete compromise of the affected system's confidentiality, integrity, and availability. Given the CVSS vector (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H), an attacker with high privileges on the network can cause severe damage without user interaction. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should restrict access to the affected software to trusted administrators only and monitor for unusual activity related to deserialization processes. Avoid processing untrusted serialized data where possible.