Threats affecting pkg:composer/axiomthemes/ai-ann

CVE-2026-65581 is a critical vulnerability in Axiomthemes AI ANN versions up to and including 1.29.0. It involves unauthenticated PHP Object Injection due to deserialization of untrusted data (CWE-502). This flaw allows remote attackers to execute arbitrary code without any authentication. The vulnerability has a CVSS score of 9.8, indicating a high impact on confidentiality, integrity, and availability. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.