Research · Sep 3, 2025
Critical Vulnerability in Sitecore Products Exposes Users to Remote Code Execution
A serious deserialization vulnerability has been identified in multiple Sitecore products, potentially allowing attackers to execute remote code through default machine keys.
What changed
A newly discovered vulnerability in Sitecore's products has raised significant security concerns. This flaw, linked to the deserialization of untrusted data, primarily affects the default machine keys used in various Sitecore applications.
The vulnerability could enable attackers to exploit these keys, leading to potential remote code execution, which poses a severe risk to organizations relying on these platforms.
Who is affected
The vulnerability impacts several Sitecore products, which are widely used across different sectors. Organizations utilizing these platforms should be aware of the risks associated with this flaw.
Affected products include Sitecore Experience Manager (XM), Experience Platform (XP), Experience Commerce (XC), and Managed Cloud.
- Sitecore Experience Manager (XM)
- Sitecore Experience Platform (XP)
- Sitecore Experience Commerce (XC)
- Sitecore Managed Cloud
What to do
Organizations using the affected Sitecore products should prioritize reviewing their security configurations. Immediate action is necessary to mitigate the risks associated with this vulnerability.
It is recommended to change default machine keys and implement additional security measures to safeguard against potential exploitation.