The vulnerability CVE-2025-58662 in Awesome Support arises from unsafe deserialization of untrusted data, enabling an attacker with high privileges to perform object injection. This can result in full compromise of the system's confidentiality, integrity, and availability. The affected versions include all releases up to 6.3.5. The CVSS v3.1 base score is 7.2, reflecting network attack vector, low attack complexity, high privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. No patch or vendor advisory is currently available to confirm remediation status.

Successful exploitation of this vulnerability allows an attacker with high privileges to inject malicious objects via deserialization, potentially leading to full system compromise including data disclosure, modification, or denial of service. The impact is rated high based on the CVSS score and the nature of the vulnerability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected plugin and limit high-privilege user accounts to trusted personnel only. Monitor for updates from the vendor to apply any forthcoming patches promptly.