Race Condition Vulnerability in Adobe Commerce Product

CVE-2025-49558

What is CVE-2025-49558?

Adobe Commerce suffers from a Time-of-check Time-of-use (TOCTOU) race condition vulnerability that permits an attacker to manipulate the timing between a resource's state check and its subsequent usage. This flaw can result in a bypass of critical security features, allowing unauthorized write access without requiring any user interaction. Timely mitigation is essential to safeguard affected systems from potential exploitation.

References