Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores

A zero-day vulnerability in Magento Open Source and Adobe Commerce, dubbed StyleSmuggler, is being actively exploited to achieve unauthenticated remote code execution and install persistent backdoors on e-commerce platforms. The attack chain leverages malicious input in log files and abuse of Magento's internal classes to execute a PHP dropper, which downloads and runs a malicious Rust-based implant. The backdoor runs under a disguised process name and establishes persistence via cron, with capabilities to read session data from Redis. No data exfiltration or lateral movement has been observed so far, but the threat is ongoing. Adobe has not yet released a patch or official advisory.

AI-extracted · verify before operational use