CVE-2025-66325

MediumCVSS 6.2

Published: 08/12/2025(UTC)Updated: 07/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.09%

0th percentile - higher than 0% of all known CVEs

Summary

Permission control vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Risk Assessment

An attacker could exploit improper permission control to access data they should not have access to, compromising service confidentiality.

Recommendation

Update the package management module to a version that includes the fix for this vulnerability.

Other vulnerabilities in Package Management Module

See all

CVE-2026-41985Medium
Use-After-Free (UAF) vulnerability in the package management module. Successful exploitation may affect service integrity.
CVE-2026-41984Medium
Use-After-Free vulnerability in the package management module. Successful exploitation may affect service integrity.

Original NVD description (English source)

Permission control vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS