CVE-2025-66422

Summary

Tryton trytond before 7.6.11 allows remote attackers to obtain sensitive trace-back (server setup) information. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.70.

Affected Software

VendorProductVersion RangeStatus
Trytontrytond0 < 6.0.70affected
Trytontrytond7.0.0 < 7.0.40affected
Trytontrytond7.1.0 < 7.4.21affected
Trytontrytond7.5.0 < 7.6.11affected

Weaknesses

  • CWE-402: CWE-402 Transmission of Private Resources into a New Sphere ('Resource Leak')

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References