Adobe ColdFusion Improper Authentication Vulnerability Leading to Arbitrary Code Execution

A vulnerability allowing improper authentication has been identified in Adobe ColdFusion versions 2023.12, 2021.18, and 2025.0 and earlier. This vulnerability could allow arbitrary code execution in the context of the current user. A low-privileged attacker with local access could exploit this issue to bypass security measures and execute code. The exploitation requires user interaction, as a victim must be persuaded to perform certain actions within the application.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution on the affected system, allowing an attacker to execute malicious code in the context of the current user.