The vulnerability CVE-2025-49386 affects the Scott Reilly Preserve Code Formatting product through deserialization of untrusted data, which allows an attacker to perform object injection. This can lead to remote code execution or other severe impacts. The affected versions include all versions up to 4.0.1. The CVSS v3.1 base score is 8.8, indicating high severity with network attack vector, low attack complexity, requiring low privileges and no user interaction, and resulting in high impact on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code or manipulate application behavior, resulting in full compromise of the system's confidentiality, integrity, and availability. Given the high CVSS score and the nature of object injection via deserialization, the impact is critical to affected environments.

No official patch or remediation is currently available for this vulnerability. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is released, users should consider disabling or restricting use of the affected plugin to mitigate risk.