CVE-2025-54466 is a code injection vulnerability in the Apache OFBiz scrum plugin that could allow unauthenticated attackers to achieve remote code execution. This issue affects versions of Apache OFBiz prior to 24.09.02 when the scrum plugin is enabled. The vulnerability is addressed in version 24.09.02.