Complete access to the database and sensitive environment variables.
Never pass user-controlled input directly to unserialize() . Use safer alternatives like json_decode() or implement strict HMAC-based integrity checks if serialization is required. zend engine v3.4.0 exploit