CVE-2025-66429

Description

An issue was discovered in cPanel 110 through 132. A directory traversal vulnerability within the Team Manager API allows for overwrite of an arbitrary file. This can allow for privilege escalation to the root user.

PUBLISHED Reserved 2025-11-30 | Published 2025-12-11 | Updated 2025-12-12 | Assigner mitre

References

docs.cpanel.net/release-notes/release-notes/

docs.cpanel.net/changelogs/126-change-log/

cve.org (CVE-2025-66429)

nvd.nist.gov (CVE-2025-66429)

Download JSON

Data based on CVE®. Copyright © 1999-2025, The MITRE Corporation. All rights reserved.