CVE-2025-34074

An authenticated remote code execution vulnerability exists in Lucee’s administrative interface due to insecure design in the scheduled task functionality. An administrator with access to /lucee/admin/web.cfm can configure a scheduled job to retrieve a remote .cfm file from an attacker-controlled server, which is written to the Lucee webroot and executed with the privileges of the Lucee service account. Because Lucee does not enforce integrity checks, path restrictions, or execution controls for scheduled task fetches, this feature can be abused to achieve arbitrary code execution. This issue is distinct from CVE-2024-55354.

• CWE-94
• CWE-829

• https://github.com/lucee/Lucee
• https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/lucee_scheduled_job.rb
• https://vulncheck.com/advisories/lucee-admin-interface-rce
• https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/lucee_scheduled_job.rb

Published

Jul 2, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-34069An authentication bypass vulnerability exists in GFI Kerio C…9.8
• CVE-2025-3407A vulnerability was found in Nothings stb up to f056911. It …8.8
• CVE-2025-34070A missing authentication vulnerability in the GFIAgent compo…9.8
• CVE-2025-34071A remote code execution vulnerability in GFI Kerio Control 9…9.8
• CVE-2025-34072A data exfiltration vulnerability exists in Anthropic’s depr…9.3
• CVE-2025-34073An unauthenticated command injection vulnerability exists in…10
• CVE-2025-34075Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2025-34076An authenticated local file inclusion vulnerability exists i…7.2
• CVE-2025-34077An authentication bypass vulnerability exists in the WordPre…10
• CVE-2025-34078A local privilege escalation vulnerability exists in NSClien…7.8
• CVE-2025-34079An authenticated remote code execution vulnerability exists …7.8
• CVE-2025-3408A vulnerability was found in Nothings stb up to f056911. It …8.8