Themeton Consult Aid up to version 1.4.3 suffers from a deserialization of untrusted data vulnerability that enables object injection attacks. This vulnerability allows an attacker to send crafted serialized data to the application, potentially leading to remote code execution or other severe impacts. The CVSS 3.1 base score is 9.8, reflecting the critical nature of this vulnerability with network attack vector, no privileges or user interaction required, and full impact on confidentiality, integrity, and availability. No official patch or vendor advisory details are currently available to confirm remediation status.

Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to execute arbitrary code or manipulate application behavior, resulting in complete compromise of the affected system's confidentiality, integrity, and availability. This could lead to data breaches, system downtime, or further network compromise.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider implementing network-level protections such as input validation, restricting access to the vulnerable service, or employing web application firewalls to detect and block malicious serialized payloads. Monitor vendor channels closely for updates or patches.