CVE-2025-27517

Name of the Vulnerable Software and Affected Versions Volt versions prior to 1.7.0

Description The issue concerns a remote code execution vulnerability within Volt components. Malicious, user-crafted request payloads could potentially lead to remote code execution. Approximately 1.08 million downloads are at risk.

Recommendations To resolve the issue, upgrade to version 1.7.0 or later. As a temporary workaround, consider restricting access to vulnerable components until a patch is applied. Avoid using malicious or user-crafted request payloads in the affected API endpoints until the issue is resolved.