CVE-2025-66360

High · 8.8

CVSS

8.8

EPSS

0.3%

Published

Nov 28, 2025

CISA due date

—

The record

An issue was discovered in Logpoint before 7.7.0. An improperly configured access control policy exposes sensitive Logpoint internal service (Redis) information to li-admin users. This can lead to privilege escalation.

Affected packages

Ecosystem	Package	Introduced	Fixed