Improper Authorization Vulnerability in Adobe Commerce by Adobe

CVE-2025-24418

What is CVE-2025-24418?

Adobe Commerce is affected by an improper authorization vulnerability that may lead to privilege escalation. This issue allows a low-privileged attacker to bypass established security measures, thereby gaining unauthorized access to restricted functionalities. The exploitation of this vulnerability does not require any user interaction, making it a potential risk for organizations using the impacted versions.

References