The vulnerability CVE-2025-69294 affects fuelthemes PeakShops versions up to 1.5.9 and is caused by deserialization of untrusted data, which enables object injection attacks. This type of vulnerability can allow attackers with low privileges to execute arbitrary code or manipulate application logic, resulting in high impact on confidentiality, integrity, and availability. The CVSS v3.1 base score is 8.8, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, and high impact on all security properties.

Successful exploitation of this vulnerability can lead to full compromise of the affected PeakShops installation, including unauthorized data access, modification, and denial of service. The vulnerability affects confidentiality, integrity, and availability with high severity. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. Until a fix is available, consider restricting access to the affected application and applying any recommended temporary mitigations from the vendor.