Back Redhotcyber

Livewire Vulnerability Exposed: 130k Apps at Risk of Remote Code Execution

Redhotcyber • December 26, 2025

Share: View original

Discover the critical Livewire vulnerability (CVE-2025-54068) that puts 130k apps at risk of remote code execution. Learn how to protect your ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Livewire Filemanager Vulnerability Enables RCE in Web Applications A critical vulnerability in Livewire Filemanager, tracked as CVE-2025-14894, allows unauthenticated remote code execution (RCE) on affected Laravel web applications. This flaw arises from improper file validation in the LivewireFilemanagerComponent.php component, putting numerous servers at risk. The vulnerability has been assigned CERT vulnerability note VU#650657. 3 sources 53

Extracted Entities

Attack Types (1)

Remote Code Execution

CVEs (1)

Vulnerabilities (1)