The vulnerability CVE-2025-58619 in sbouey Falang multilanguage plugin (versions <= 1.3.65) is caused by unsafe deserialization of untrusted data, enabling object injection attacks. This flaw allows an attacker to manipulate serialized objects during deserialization, potentially leading to remote code execution or other severe impacts. The CVSS v3.1 score is 8.8, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability can result in full compromise of the affected system's confidentiality, integrity, and availability. Attackers may execute arbitrary code or perform unauthorized actions due to object injection via deserialization of untrusted data. No known exploits have been reported in the wild so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or workaround information is provided, users should monitor for updates from the vendor and apply any official fixes once available. Until then, consider restricting access to the vulnerable component and limiting user interactions that trigger deserialization if possible.