CVE-2025-66424: Medium severity tryton trytond vulnerability
Tryton trytond 6.0 before 7.6.11 does not enforce access rights for data export. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.70.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
pip/trytondto a version that resolves this vulnerability.Fixed in 6.0.70 - Upgrade
Upgrade
pip/trytondto a version that resolves this vulnerability.Fixed in 7.0.40 - Upgrade
Upgrade
pip/trytondto a version that resolves this vulnerability.Fixed in 7.4.21 - Upgrade
Upgrade
pip/trytondto a version that resolves this vulnerability.Fixed in 7.6.11 - Upgrade
Upgrade
Tryton trytondto a version that resolves this vulnerability.Fixed in 7.6.11 - Upgrade
Upgrade
Tryton trytondto a version that resolves this vulnerability.Fixed in 7.4.21 - Upgrade
Upgrade
Tryton trytondto a version that resolves this vulnerability.Fixed in 7.0.40 - Upgrade
Upgrade
Tryton trytondto a version that resolves this vulnerability.Fixed in 6.0.70
Event History
Frequently Asked Questions
What is the severity of CVE-2025-66424?
CVE-2025-66424 has been classified as a critical vulnerability due to its potential impact on data security.
How do I fix CVE-2025-66424?
To fix CVE-2025-66424, upgrade your Tryton trytond to versions 7.6.11, 7.4.21, 7.0.40, or 6.0.70.
What does CVE-2025-66424 affect?
CVE-2025-66424 affects Tryton trytond versions prior to 7.6.11, specifically versions up to 6.0.69.
What type of vulnerability is CVE-2025-66424?
CVE-2025-66424 is an access control vulnerability that allows unauthorized data export.
When was CVE-2025-66424 disclosed?
CVE-2025-66424 was disclosed in 2025, indicating a recent identification of this security issue.