This vulnerability in ThemeGoods Capella involves deserialization of untrusted data, which can lead to object injection attacks. It affects versions up to 2.5.5, allowing an unauthenticated attacker to remotely execute arbitrary code or cause denial of service. The CVSS 3.1 base score of 9.8 reflects the critical nature of this vulnerability, with network attack vector, low attack complexity, no privileges or user interaction required, and full impact on confidentiality, integrity, and availability.

Successful exploitation can result in complete compromise of the affected system, including unauthorized code execution, data manipulation, and service disruption. Given the critical CVSS score and the nature of the vulnerability, the impact is severe.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting network access to the affected application and monitoring for suspicious activity related to deserialization processes.