This vulnerability in axiomthemes Mounthood involves deserialization of untrusted data, enabling object injection attacks. It affects all versions up to 1.3.2. The CVSS 3.1 base score of 9.8 reflects that the vulnerability is remotely exploitable with no privileges or user interaction required, and can result in complete compromise of confidentiality, integrity, and availability of the affected system. No official patch or fix information is available, and the product is not a cloud service, so remediation depends on vendor updates or user action.

Successful exploitation can lead to full compromise of the affected system's confidentiality, integrity, and availability. The vulnerability allows an attacker to inject malicious objects through deserialization, which can result in remote code execution or other severe impacts. There are no known exploits in the wild currently, but the high CVSS score indicates a critical risk if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor channels for updates. Until a fix is available, consider restricting access to the affected application and applying any available workarounds recommended by the vendor once published.