A vulnerability categorized as critical has been discovered in Bitrix24 up to 25.100.300. This impacts an unknown function of the component Translate Module. The manipulation results in unrestricted upload.

This vulnerability was named CVE-2025-67886. The attack may be performed from remote. In addition, an exploit is available.