CVE-2026-95534

Summary

A deserialization vulnerability allows for object injection, leading to potential remote code execution.

Exploitability

Exploitation requires access to the affected endpoint and knowledge of the deserialization process. Precondition is the presence of untrusted data being deserialized.

Blast radius

If exploited, this could lead to full compromise of the affected system, including data theft and control by an attacker.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 2.0.20 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.