CVE-2025-66424: Medium severity tryton trytond vulnerability
Published Nov 30, 2025
·Updated
Tryton trytond 6.0 before 7.6.11 does not enforce access rights for data export. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.70.
Affected Software
10 affected componentsFixes available
tryton trytond<7.6.11
tryton trytond>6.0<=6.0.69
pip/trytond>=6.0.0<6.0.70
6.0.70
pip/trytond>=7.0.0<7.0.40
7.0.40
pip/trytond>=7.1.0<7.4.21
7.4.21
pip/trytond>=7.5.0<7.6.11
7.6.11
tryton trytond>=6.0.0<6.0.70
tryton trytond>=7.0.0<7.0.40
tryton trytond>=7.4.0<7.4.21
tryton trytond>=7.6.0<7.6.11
Event History
Nov 30, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:15 AM
DescriptionSeverityWeaknessAffected Software
Advisory Published
via GitHub·03:30 AM
Data Sourced
via GitHub·03:30 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-66424?
CVE-2025-66424 has been classified as a critical vulnerability due to its potential impact on data security.
2
How do I fix CVE-2025-66424?
To fix CVE-2025-66424, upgrade your Tryton trytond to versions 7.6.11, 7.4.21, 7.0.40, or 6.0.70.
3
What does CVE-2025-66424 affect?
CVE-2025-66424 affects Tryton trytond versions prior to 7.6.11, specifically versions up to 6.0.69.
4
What type of vulnerability is CVE-2025-66424?
CVE-2025-66424 is an access control vulnerability that allows unauthorized data export.
5
When was CVE-2025-66424 disclosed?
CVE-2025-66424 was disclosed in 2025, indicating a recent identification of this security issue.