The vulnerability identified as CVE-2025-31430 in themeton The Business involves CWE-502: Deserialization of Untrusted Data. This issue allows an attacker to perform object injection by exploiting unsafe deserialization mechanisms in affected versions up to 1.6.1. The CVSS v3.1 base score is 9.8, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. No vendor patch or remediation details are currently provided, and the product is not a cloud service.

Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to execute arbitrary code or commands, leading to full system compromise including data theft, modification, or service disruption. The critical CVSS score reflects the severity of potential impacts on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling or restricting deserialization features if possible, and monitor for updates from themeton. No official patch or temporary fix has been published at this time.