Skip to content
OpenAdvisories

Vendor

livewire

4 known vulnerabilities.

Products

livewire 3 volt 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.2
    CVE-2025-54068 Exploited Public exploit Scanner template EPSS 96%

    Livewire vulnerable to remote command execution during property update hydration

    Livewire is a full-stack framework for Laravel. In Livewire v3 up to and including v3.6.3, a vulnerability allows unauthenticated attackers to achieve remote command execution in specific scenarios. The issue stems from how certain component property updates …

    livewire livewire livewire/livewire Packagist
    KEV Mar 20, 2026
  • Critical 9.3
    CVE-2025-27517

    Volt Allows RCE Via User-Crafted Requests

    Volt is an elegantly crafted functional API for Livewire. Malicious, user-crafted request payloads could potentially lead to remote code execution within Volt components. This vulnerability is fixed in 1.7.0.

    livewire volt livewire/volt Packagist