Path Traversal Vulnerability in Adobe Commerce Products

CVE-2025-24406

What is CVE-2025-24406?

An improper limitation of a pathname to a restricted directory vulnerability exists in Adobe Commerce, allowing attackers to bypass security features. Malicious actors can exploit this flaw to alter files located outside the intended restricted directories without any user interaction. This vulnerability affects multiple versions of Adobe Commerce, highlighting the need for immediate assessment and remediation to protect sensitive data.

References