The vulnerability CVE-2025-54686 affects scriptsbundle Exertio through version 1.3.2 and involves deserialization of untrusted data, which enables object injection attacks. This can allow an unauthenticated attacker to remotely execute arbitrary code or cause denial of service. The CVSS 3.1 base score is 9.8, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and full impact on confidentiality, integrity, and availability. No vendor patch or advisory details are currently available to confirm remediation status.

Successful exploitation of this vulnerability could lead to complete compromise of the affected system, including remote code execution and denial of service. The attacker does not need any privileges or user interaction, making this a highly critical threat. However, no known exploits have been reported in the wild yet.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, avoid processing untrusted serialized data with affected versions of Exertio. Monitor vendor channels for updates and apply patches promptly once available.