The vulnerability CVE-2025-69370 affects ThemeGoods Capella versions up to 2.5.5 and involves deserialization of untrusted data, which enables object injection attacks. This type of vulnerability can allow an attacker to execute arbitrary code or manipulate application behavior by injecting malicious objects during the deserialization process. The CVSS 3.1 score of 9.8 reflects that the vulnerability is remotely exploitable without privileges or user interaction and results in high impact to confidentiality, integrity, and availability.

Successful exploitation of this vulnerability could lead to full compromise of the affected system, including unauthorized code execution, data manipulation, and denial of service. The critical CVSS score indicates that the vulnerability poses a severe risk to affected installations of ThemeGoods Capella up to version 2.5.5.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to the vulnerable application and monitor for updates from ThemeGoods. No vendor advisory or patch links are currently provided, so no definitive remediation steps can be recommended at this time.