The vulnerability CVE-2025-68899 affects designthemes Vivagh (versions up to 2.4) and involves deserialization of untrusted data, which enables object injection attacks. This type of vulnerability can allow an attacker with low privileges to execute arbitrary code or manipulate application behavior, impacting confidentiality, integrity, and availability. The CVSS 3.1 base score is 8.8, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, and high impact on all security properties. No official patch or vendor advisory is currently available, and the product is not a cloud service.

Successful exploitation of this vulnerability can lead to full compromise of the affected system's confidentiality, integrity, and availability. An attacker could potentially execute arbitrary code or inject malicious objects, severely impacting the application and its data. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is available, users should monitor vendor communications closely. Until a fix is released, consider restricting access to the vulnerable application and applying any available workarounds recommended by the vendor once published.