The vulnerability CVE-2025-58662 in Awesome Support (<= 6.3.5) is caused by unsafe deserialization of untrusted data, enabling object injection attacks. This can allow an attacker with high privileges and network access to execute arbitrary code or manipulate application behavior, resulting in full compromise of the system's confidentiality, integrity, and availability. The CVSS 3.1 base score is 7.2, reflecting high impact with network attack vector, low attack complexity, required privileges, and no user interaction.

Successful exploitation of this vulnerability can lead to complete compromise of the affected system, including unauthorized disclosure of information, modification of data, and denial of service. The attacker requires high privileges to exploit this vulnerability remotely over the network. No known exploits are reported in the wild as of the published date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch or workaround information is provided at this time. Users should monitor vendor communications for updates and apply any official fixes once available. Until then, restrict network access and limit privileges to reduce risk.