CVE-2025-66429

High · 8.8

CVSS

8.8

EPSS

0.8%

Published

Dec 11, 2025

CISA due date

—

The record

An issue was discovered in cPanel 110 through 132. A directory traversal vulnerability within the Team Manager API allows for overwrite of an arbitrary file. This can allow for privilege escalation to the root user.

Affected packages

Ecosystem	Package	Introduced	Fixed