CVE-2025-27517

Volt Allows RCE Via User-Crafted Requests PUBLISHED

Description (CNA)

Volt is an elegantly crafted functional API for Livewire. Malicious, user-crafted request payloads could potentially lead to remote code execution within Volt components. This vulnerability is fixed in 1.7.0.

Affected (CNA)

Vendor / product	Versions
livewire / volt	affected < 1.7.0

CWE

CWE-20

References

https://github.com/livewire/volt/security/advisories/GHSA-v69f-5jxm-hwvv

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.