This vulnerability (CVE-2025-31398) involves unsafe deserialization of untrusted data in themeton PIMP - Creative MultiPurpose up to version 1.7. It allows an attacker to perform object injection, potentially leading to full compromise of the affected system. The CVSS 3.1 base score is 9.8, reflecting network attack vector, no required privileges or user interaction, and high impact on confidentiality, integrity, and availability. No patch or remediation details have been provided, and the product is not a cloud service.

Successful exploitation could lead to complete compromise of the affected system, including unauthorized disclosure, modification, or destruction of data and disruption of service. The high CVSS score reflects the critical nature of this vulnerability. However, no known exploits have been reported in the wild so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch links are available, users should monitor vendor communications for updates. Until a patch is released, consider restricting network exposure of the affected application and applying any available workarounds recommended by the vendor.