Incorrect Authorization Flaw in Adobe Commerce Products

CVE-2025-54267

What is CVE-2025-54267?

Adobe Commerce is susceptible to an Incorrect Authorization vulnerability that enables low-privileged attackers to bypass security controls. This weakness allows unauthorized access to elevated privileges, posing a significant threat to the integrity of affected products. Notably, exploitation of this flaw does not require user interaction, thus increasing the risk of unauthorized actions within the system. Businesses using affected versions should prioritize reviewing their security configurations and applying necessary patches to mitigate potential exploitation.

References