CVE Tools
Sign in
Back to feed
Exploited in the wild Laravel Livewire Wong Gen Deng rce Laravel data-breach

Laravel Livewire Vulnerability Exposes Over 6,000 Apps

Daily CyberSecurity (securityonline.info)··4 min read
CVE Tools coverage

A critical unauthenticated remote code execution issue in livewire/livewire (composer) has been actively exploited in the wild, tracked as CVE-2025-54068. Systems using versions >= 3.0.0-beta.1 and < 3.6.4 are at risk during Livewire property update hydration, which can allow attackers to run arbitrary code and steal secrets from environments, including database credentials and cloud/payment tokens. With CVE-2025-54068 patched in 3.6.4, organizations should upgrade immediately to limit widespread data exposure.

Open on Daily CyberSecurity (securityonline.info)

Related coverage

Other stories on the same CVEs
Worried this affects your company?

See what your business actually exposes to the Internet — a free external review, no install, no obligation.

Check my exposure