This vulnerability (CVE-2025-52826) in uxper Sala arises from unsafe deserialization of untrusted data, classified under CWE-502. It allows an attacker with low privileges to remotely execute object injection attacks without user interaction, potentially compromising confidentiality, integrity, and availability of the affected system. The affected versions include Sala up to 1.1.3. The CVSS 3.1 vector indicates network attack vector, low attack complexity, and no privileges required beyond low-level privileges. No patch or remediation details have been provided by the vendor or authoritative sources at this time.

Successful exploitation can lead to full compromise of the affected system, including unauthorized access to sensitive data, modification or destruction of data, and disruption of service. The vulnerability's high CVSS score reflects the critical impact on confidentiality, integrity, and availability. However, there are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting network access to the affected service and monitor for unusual activity related to deserialization processes. Avoid processing untrusted serialized data where possible.