This vulnerability in Metagauss EventPrime involves deserialization of untrusted data, which allows an attacker to perform object injection. The affected versions include all releases up to and including 4.2.8.0. Exploitation could result in complete compromise of the system's confidentiality, integrity, and availability. The CVSS 3.1 base score is 9.8, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. No patch or vendor advisory is currently available to confirm remediation status.

Successful exploitation of this vulnerability could allow an unauthenticated attacker to execute arbitrary code or manipulate application logic, resulting in full compromise of the affected system's confidentiality, integrity, and availability. This could lead to data breaches, system takeover, or denial of service.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting network access to the affected application and monitoring for suspicious activity related to deserialization processes. Avoid processing untrusted serialized data where possible.