CVE-2025-66429: Path Traversal
An issue was discovered in cPanel 110 through 132. A directory traversal vulnerability within the Team Manager API allows for overwrite of an arbitrary file. This can allow for privilege escalation to the root user.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-66429?
CVE-2025-66429 is considered a critical vulnerability due to its potential for privilege escalation to the root user.
How do I fix CVE-2025-66429?
To fix CVE-2025-66429, upgrade cPanel to a version higher than 132 that addresses this directory traversal issue.
What impact does CVE-2025-66429 have on cPanel?
The impact of CVE-2025-66429 allows an attacker to overwrite arbitrary files which can lead to unauthorized access and system compromise.
Which versions of cPanel are affected by CVE-2025-66429?
cPanel versions 110 through 132 are affected by CVE-2025-66429 and should be updated promptly to mitigate the risk.
What is the nature of the vulnerability described in CVE-2025-66429?
CVE-2025-66429 is a directory traversal vulnerability within the Team Manager API that can be exploited for file overwrites.