Roundcube mail server is an open-source webmail client, allowing users to send and receive emails through a browser, and is widely used in various email systems. Recently, the Roundcube development team received a report from a cybersecurity vendor indicating a significant security vulnerability (CVE-2025-49113, CVSS: 9.9) in the system, and a patched update has been released. [cite_start]This vulnerability is a PHP object deserialization flaw, which allows authenticated attackers to remotely execute arbitrary code, posing a threat to the system.