This vulnerability (CVE-2025-60889) in StellarGroup HPX 1.11.0 arises from insecure deserialization of untrusted input, classified under CWE-502. Successful exploitation could lead to remote code execution with high confidentiality, integrity, and availability impacts, as reflected by a CVSS 3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). There is no official remediation or patch available at this time, and no known exploits have been documented. The vulnerability is publicly disclosed and considered critical due to its potential severity.

An attacker can exploit this vulnerability remotely without authentication or user interaction to execute arbitrary code on affected systems, potentially leading to full system compromise. The impact includes complete loss of confidentiality, integrity, and availability of the affected system. No known exploits are currently active in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should apply general best practices such as restricting network exposure of affected systems and monitoring for suspicious activity related to deserialization processes. Avoid processing untrusted serialized data where possible.