CVE-2025-66422: Medium severity tryton trytond vulnerability
Published Nov 30, 2025
·Updated
Tryton trytond before 7.6.11 allows remote attackers to obtain sensitive trace-back (server setup) information. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.70.
Affected Software
9 affected componentsFixes available
tryton trytond<7.6.11
pip/trytond<6.0.70
6.0.70
pip/trytond>=7.0.0<7.0.40
7.0.40
pip/trytond>=7.1.0<7.4.21
7.4.21
pip/trytond>=7.5.0<7.6.11
7.6.11
tryton trytond>=6.0.0<6.0.70
tryton trytond>=7.0.0<7.0.40
tryton trytond>=7.4.0<7.4.21
tryton trytond>=7.6.0<7.6.11
Event History
Nov 30, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:15 AM
DescriptionSeverityWeaknessAffected Software
Advisory Published
via GitHub·03:30 AM
Data Sourced
via GitHub·03:30 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-66422?
CVE-2025-66422 is classified as a vulnerability that may expose sensitive information, but no specific severity rating has been assigned.
2
How do I fix CVE-2025-66422?
To fix CVE-2025-66422, upgrade Tryton trytond to versions 7.6.11, 7.4.21, 7.0.40, or 6.0.70.
3
What kind of information can be exposed by CVE-2025-66422?
CVE-2025-66422 allows remote attackers to obtain sensitive trace-back information from the server setup.
4
Which versions of Tryton are affected by CVE-2025-66422?
CVE-2025-66422 affects all versions of Tryton trytond before 7.6.11.
5
Is there a workaround for CVE-2025-66422?
There is no known workaround for CVE-2025-66422, and it is recommended to upgrade to the fixed versions.