CVE-2025-54068

Laravel Livewire Code Injection Vulnerability

Livewire

Livewire is a full-stack framework for Laravel. In Livewire v3 up to and including v3.6.3, a vulnerability allows unauthenticated attackers to achieve remote command execution in specific scenarios. The issue stems from how certain component property updates are hydrated. This vulnerability is unique to Livewire v3 and does not affect prior major versions. Exploitation requires a component to be mounted and configured in a particular way, but does not require authentication…

17. Jul 2025

Ausgewertete Quellen

• Hinweis
  https://www.threathunter.ai/blog/iranian-threat-actor-tools-techniques-iocs-ioas/
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-54068
• CISA
  Laravel Livewire Code Injection Vulnerability
• NVD
  CVE-2025-54068
• GitHub
  https://github.com/livewire/livewire/security/advisories/GHSA-29cq-5w36-x7w3