CVE-2025-2532

Summary

CVE-2025-2532 is a remote code execution vulnerability affecting Luxion KeyShot. Malicious USDC files can be used to exploit this vulnerability, which stems from the application's failure to validate object existence before performing operations on them during file parsing. An attacker can leverage this issue to execute arbitrary code in the context of the affected installation. User interaction is necessary to exploit this vulnerability, requiring the target to visit a malicious page or open a malicious file. (Previously identified as ZDI-CAN-23709.)

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.