9.3
Critical
CVE-2025-27517 Volt is an elegantly crafted functional API for Livewire
Description
Volt is an elegantly crafted functional API for Livewire. Malicious, user-crafted request payloads could potentially lead to remote code execution within Volt components. This vulnerability is fixed in 1.7.0.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| volt 1.7 | earliest → < 1.7.0 | 1.7.0 |