This vulnerability involves unsafe deserialization of untrusted data in the Site Chat on Telegram product by Guru Team, allowing an attacker to perform object injection. This can lead to remote code execution or other severe impacts. The affected versions are from initial releases through 1.0.4. The vulnerability has a CVSS 3.1 base score of 9.8, reflecting critical impact across confidentiality, integrity, and availability with no required privileges or user interaction. No patch or official remediation guidance has been provided yet, and the product is not a cloud service.

Successful exploitation can result in complete compromise of the affected system, including unauthorized code execution, data manipulation, and service disruption. The vulnerability affects all users running vulnerable versions of Site Chat on Telegram, potentially allowing remote attackers to fully control the application environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or restricting access to the vulnerable component to prevent exploitation. Monitor vendor channels for updates and apply patches promptly once available.