This vulnerability (CVE-2025-31047) in Themify Edmin is classified as CWE-502: Deserialization of Untrusted Data. It allows an attacker to perform object injection by exploiting unsafe deserialization mechanisms in the product versions up to 2.0.0. The CVSS 3.1 base score is 8.8, indicating a high impact with network attack vector, low attack complexity, requiring low privileges and no user interaction, affecting confidentiality, integrity, and availability. No patch or vendor advisory is currently available to confirm remediation status.

Successful exploitation of this vulnerability can lead to full compromise of the affected system's confidentiality, integrity, and availability. An attacker could inject malicious objects during deserialization, potentially executing arbitrary code or causing denial of service. No known exploits have been reported in the wild so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or restricting deserialization functionality if possible or apply other application-level mitigations to prevent untrusted data processing.