Insecure Deserialization is a vulnerability in which deserializing untrusted data allows unintended object creation or execution of processing.

In CTFs, challenges may involve supplying crafted serialized data as input to achieve arbitrary code execution or obtain sensitive information. (automatically translated from Japanese)