Adobe ColdFusion Improper Access Control Vulnerability Allowing Code Execution

A vulnerability has been identified in Adobe ColdFusion versions 2023.12, 2021.18, and 2025.0 and earlier, related to improper access control. This vulnerability could lead to a security feature bypass, allowing a low-privileged attacker with local access to bypass security protections and execute code. Exploitation of this issue requires user interaction, as a victim must be coerced into performing actions within the application.

Impact

Exploitation of this vulnerability could allow for unauthorized code execution by bypassing security controls.