flame-11/cve-2025-54068-livewireReproducible Docker-based lab for CVE-2025-54068 in Livewire v3.6.3, including a safe PoC exploit chain script for educational vulnerability analysis.
This folder builds a minimal Laravel + Livewire v3 application pinned to Livewire 3.6.3 (vulnerable) for reproducing CVE-2025-54068.
The mounted component is intentionally written to be compatible with the public exploit chain (it allows the stage-1 cast-to-array step).
docker compose up -d --build
Open:
http://localhost:18081/This runs a two-step request sequence similar to public exploit chains, but uses an in-band marker (echo) as a safe proof.
python3 scripts/poc.py http://localhost:18081/
docker compose down -v