Path Traversal Vulnerability in Adobe ColdFusion Products

CVE-2025-54261

What is CVE-2025-54261?

Adobe ColdFusion versions 2025.3, 2023.15, and 2021.21 and earlier are susceptible to a path traversal vulnerability that allows attackers to manipulate file paths, potentially executing arbitrary code on the affected system. This security flaw stems from improper limitation of pathname restrictions, granting unauthorized access to restricted directories. Exploiting this vulnerability could result in severe compromise of the affected applications, highlighting the need for immediate security assessments and patches.

References