A deserialization of untrusted data vulnerability exists in weDevs Dokan dokan-lite up to version 5.3.1. This flaw allows object injection, potentially leading to high impact on confidentiality, integrity, and availability. The vulnerability is identified as CVE-2026-115590 with a CVSS 3.1 score of 7.2, indicating a high severity. No patch or remediation information is currently provided.