CVE-2025-15246 | aizuda snail-job up to 1.7.0 on macOS API FurySerializer.deserialize argsStr deserialization (ICQV61)

A vulnerability has been found in aizuda snail-job up to 1.7.0 on macOS and classified as critical. Affected by this vulnerability is the function FurySerializer.deserialize of the component API. This manipulation of the argument argsStr causes deserialization.

This vulnerability is registered as CVE-2025-15246. Remote exploitation of the attack is possible. Furthermore, an exploit is available.