This vulnerability affects multiple IBM MQ versions and arises from improper handling of deserialization of untrusted data. An attacker with authentication privileges could exploit this flaw to execute arbitrary code on the affected system. The CVSS 3.1 base score is 8.8, indicating a high impact with network attack vector, low attack complexity, required privileges, no user interaction, and high confidentiality, integrity, and availability impacts.

Successful exploitation could lead to full compromise of the affected IBM MQ system, allowing an attacker to execute arbitrary code with the privileges of the IBM MQ process. This can result in unauthorized data access, modification, or denial of service.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No vendor advisory or patch links are provided in the input data. Until an official fix is available, restrict access to IBM MQ to trusted users and monitor for unusual activity. Avoid processing untrusted data where possible.