CVE-2025-60226: Deserialization of Untrusted Data in axiomthemes White Rabbit
Deserialization of Untrusted Data vulnerability in axiomthemes White Rabbit whiterabbit allows Object Injection.This issue affects White Rabbit: from n/a through <= 1.5.2.
AI Analysis
Technical Summary
This vulnerability in axiomthemes White Rabbit (<= 1.5.2) involves deserialization of untrusted data, which permits object injection attacks. Such attacks can allow an attacker to execute arbitrary code or manipulate application behavior by injecting malicious serialized objects. The CVSS score of 9.8 reflects the critical nature of this vulnerability, with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The vulnerability affects the plugin's handling of serialized data inputs.
Potential Impact
Successful exploitation can lead to full compromise of the affected system, including unauthorized code execution, data manipulation, and potential denial of service. The vulnerability affects confidentiality, integrity, and availability, making it highly critical for users of the affected plugin versions.
Mitigation Recommendations
No official patch or remediation information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, it is recommended to disable or remove the affected plugin version to prevent exploitation.
CVE-2025-60226: Deserialization of Untrusted Data in axiomthemes White Rabbit
Description
Deserialization of Untrusted Data vulnerability in axiomthemes White Rabbit whiterabbit allows Object Injection.This issue affects White Rabbit: from n/a through <= 1.5.2.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability in axiomthemes White Rabbit (<= 1.5.2) involves deserialization of untrusted data, which permits object injection attacks. Such attacks can allow an attacker to execute arbitrary code or manipulate application behavior by injecting malicious serialized objects. The CVSS score of 9.8 reflects the critical nature of this vulnerability, with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The vulnerability affects the plugin's handling of serialized data inputs.
Potential Impact
Successful exploitation can lead to full compromise of the affected system, including unauthorized code execution, data manipulation, and potential denial of service. The vulnerability affects confidentiality, integrity, and availability, making it highly critical for users of the affected plugin versions.
Mitigation Recommendations
No official patch or remediation information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, it is recommended to disable or remove the affected plugin version to prevent exploitation.
Technical Details
- Data Version
- 5.1
- Assigner Short Name
- Patchstack
- Date Reserved
- 2025-09-25T15:34:33.695Z
- Cvss Version
- null
- State
- PUBLISHED
Threat ID: 68f8eff704677bbd79439ad1
Added to database: 10/22/2025, 2:53:43 PM
Last enriched: 4/29/2026, 4:20:46 AM
Last updated: 5/10/2026, 2:42:20 PM
Views: 75
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.