The vulnerability CVE-2025-53465 affects raoinfotech's GSheets Connector up to version 1.1.1 and is caused by deserialization of untrusted data, which allows an attacker to perform object injection. This can lead to remote code execution or other severe impacts on the system. The CVSS 3.1 base score is 7.2, reflecting network attack vector, low attack complexity, high privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. No patch or official fix has been documented or linked by the vendor at this time.

Successful exploitation of this vulnerability can lead to full compromise of the affected system's confidentiality, integrity, and availability. Given the nature of object injection via deserialization, attackers could execute arbitrary code or manipulate application behavior. However, exploitation requires high privileges, which limits the attack surface somewhat. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the GSheets Connector to trusted users only and monitor for suspicious activity. Avoid processing untrusted input data where possible. Follow up with raoinfotech for updates on patches or official mitigations.