This vulnerability in Ricky involves deserialization of untrusted data, enabling an attacker to perform object injection. Versions prior to 2.31 are affected. The vulnerability allows remote attackers to execute arbitrary code or cause denial of service without any authentication or user interaction. The CVSS 3.1 vector indicates it is exploitable over the network with low attack complexity and results in high impact on confidentiality, integrity, and availability.

Successful exploitation can lead to complete system compromise including arbitrary code execution, data manipulation, and service disruption. The vulnerability is critical due to its high CVSS score (9.8) and the lack of required privileges or user interaction for exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting network access to the affected service and monitor for suspicious activity related to deserialization processes.