high8.8
CVE-2025-66429
An issue was discovered in cPanel 110 through 132.
Impact
An issue was discovered in cPanel 110 through 132. A directory traversal vulnerability within the Team Manager API allows for overwrite of an arbitrary file. This can allow for privilege escalation to the root user.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cpanel | Cpanel | from 110.0.0 before 126.0.37 from 128.0.1 before 130.0.16 from 132.0.0 before 132.0.4 |