Critical CVE-2025-24434 Vulnerability in Adobe Commerce and Magento Open Source

Adobe recently published patches for Adobe Commerce and Magento Open Source[1], which resolves a critical vulnerability in the products. The vulnerability abuses improper authorization, which could result in an unauthenticated attacker elevating their privileges, malicious remote code execution, and gain unauthorized access. Exploitation of this vulnerability does not require any interaction from any local user, further increasing it’s criticality.