Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2025-27517

Volt Allows RCE Via User-Crafted Requests

Description

Volt is an elegantly crafted functional API for Livewire. Malicious, user-crafted request payloads could potentially lead to remote code execution within Volt components. This vulnerability is fixed in 1.7.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

livewire volt

  • < 1.7.0affected

References