Search: CVE-2025-68455

CVE-2025-68455 is a high-severity vulnerability in Craft CMS versions 4.0.0-RC1 through 4.16.16 and 5.0.0-RC1 through 5.8.20, allowing authenticated administrators to execute remote code via maliciously crafted Behaviors. The flaw arises from unsafe reflection (CWE-470), where externally controlled input is used to select classes or code, enabling potential Remote Code Execution (RCE).