CVE-2025-65530

High · 8.8

CVSS

8.8

EPSS

0.3%

Published

Dec 12, 2025

CISA due date

—

The record

An eval injection in the malware de-obfuscation routines of CloudLinux ai-bolit before v32.7.4 allows attackers to overwrite arbitrary files as root via scanning a crafted file.

Affected packages

Ecosystem	Package	Introduced	Fixed