Apache has released a security update to address an important vulnerability in Tomcat web server that could lead to an attacker achieving remote code execution.

A critical remote code execution (RCE) vulnerability in Apache Tomcat tracked as CVE-2025-24813 is actively exploited in the wild, enabling attackers to take over servers with a simple PUT request.