CVE-2025-66422: Medium severity tryton trytond vulnerability

Q: What is the severity of CVE-2025-66422?

CVE-2025-66422 is classified as a vulnerability that may expose sensitive information, but no specific severity rating has been assigned.

Q: How do I fix CVE-2025-66422?

To fix CVE-2025-66422, upgrade Tryton trytond to versions 7.6.11, 7.4.21, 7.0.40, or 6.0.70.

Q: What kind of information can be exposed by CVE-2025-66422?

CVE-2025-66422 allows remote attackers to obtain sensitive trace-back information from the server setup.

Q: Which versions of Tryton are affected by CVE-2025-66422?

CVE-2025-66422 affects all versions of Tryton trytond before 7.6.11.

Q: Is there a workaround for CVE-2025-66422?

There is no known workaround for CVE-2025-66422, and it is recommended to upgrade to the fixed versions.

Published Nov 30, 2025

Updated

Tryton trytond before 7.6.11 allows remote attackers to obtain sensitive trace-back (server setup) information. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.70.

Affected Software

9 affected componentsFixes available

tryton trytond<7.6.11

pip/trytond<6.0.70

6.0.70

pip/trytond>=7.0.0<7.0.40

7.0.40

pip/trytond>=7.1.0<7.4.21

7.4.21

pip/trytond>=7.5.0<7.6.11

7.6.11

tryton trytond>=6.0.0<6.0.70

tryton trytond>=7.0.0<7.0.40

tryton trytond>=7.4.0<7.4.21

tryton trytond>=7.6.0<7.6.11

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade pip/trytond to a version that resolves this vulnerability.
Fixed in 6.0.70
Upgrade
Upgrade pip/trytond to a version that resolves this vulnerability.
Fixed in 7.0.40
Upgrade
Upgrade pip/trytond to a version that resolves this vulnerability.
Fixed in 7.4.21
Upgrade
Upgrade pip/trytond to a version that resolves this vulnerability.
Fixed in 7.6.11
Upgrade
Upgrade tryton/trytond to a version that resolves this vulnerability.
Fixed in 7.6.11
Upgrade
Upgrade tryton/trytond to a version that resolves this vulnerability.
Fixed in 7.4.21
Upgrade
Upgrade tryton/trytond to a version that resolves this vulnerability.
Fixed in 7.0.40
Upgrade
Upgrade tryton/trytond to a version that resolves this vulnerability.
Fixed in 6.0.70

Event History

Nov 30, 2025

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:15 AM

DescriptionSeverityWeaknessAffected Software

Advisory Published

via GitHub·03:30 AM

Data Sourced

via GitHub·03:30 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-66422?

CVE-2025-66422 is classified as a vulnerability that may expose sensitive information, but no specific severity rating has been assigned.

How do I fix CVE-2025-66422?

To fix CVE-2025-66422, upgrade Tryton trytond to versions 7.6.11, 7.4.21, 7.0.40, or 6.0.70.

What kind of information can be exposed by CVE-2025-66422?

CVE-2025-66422 allows remote attackers to obtain sensitive trace-back information from the server setup.

Which versions of Tryton are affected by CVE-2025-66422?

CVE-2025-66422 affects all versions of Tryton trytond before 7.6.11.

Is there a workaround for CVE-2025-66422?

There is no known workaround for CVE-2025-66422, and it is recommended to upgrade to the fixed versions.

CVE-2025-66422: Medium severity tryton trytond vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

What is the severity of CVE-2025-66422?

How do I fix CVE-2025-66422?

What kind of information can be exposed by CVE-2025-66422?

Which versions of Tryton are affected by CVE-2025-66422?

Is there a workaround for CVE-2025-66422?

Company

Resources

Contact