This vulnerability in rascals Meloo (versions before 2.8.2) is caused by unsafe deserialization of untrusted data, enabling an attacker to perform object injection. The issue allows an attacker with low privileges to remotely execute code or manipulate the application state, impacting confidentiality, integrity, and availability. The CVSS 3.1 score of 8.8 reflects the critical nature of the flaw with network attack vector and no user interaction needed. No vendor advisory or patch links are currently available to confirm remediation status.

Successful exploitation can lead to full compromise of the affected Meloo application, including unauthorized code execution and data manipulation. The vulnerability impacts confidentiality, integrity, and availability with high severity. No known exploits have been reported in the wild so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid processing untrusted serialized data in Meloo and consider applying application-level controls to restrict input sources. Monitor vendor channels for updates and patches.