CVE-2025-27517Critical · CVSS 9.3EPSS 0.62%Fix availableVolt Allows RCE Via User-Crafted RequestsVolt is an elegantly crafted functional API for Livewire. Malicious, user-crafted request payloads could potentially lead to remote code execution within Volt components. This vulnerability is fixed in 1.7.0.livewire/voltPHPUpdate to 1.7.0Published March 5, 2025Updated March 5, 2025Source advisory 1 ↗Source advisory 2 ↗