The vulnerability is an insecure deserialization flaw that allows an attacker to supply crafted input to the StellarGroup HPX application, potentially causing the execution of arbitrary code. When the flaw is triggered, the originating attacker can subvert the confidentiality, integrity, and availability of the affected system, resulting in a full compromise of the environment running the vulnerable component. The description indicates that the issue surfaces under certain conditions, but the specific prerequisites for exploitation are not detailed in the available data.

StellarGroup HPX version 1.11.0 is the only documented affected product. No additional vendors, product lines or patch versions are listed, so the scope is limited to that single component.

The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. The CVSS score is not disclosed, though the presence of arbitrary code execution implies a high severity rating. Based on the description, it is inferred that exploitation may be achieved remotely by supplying malicious data to the deserialization routine, although the exact attack vector is not specified. The risk to any system running the affected version is significant, especially if it is exposed to untrusted networks or users.