CVE-2025-66744: Path Traversal
Published Jan 9, 2026
·Updated
In Yonyou YonBIP v3 and before, the LoginWithV8 interface in the series data application service system is vulnerable to path traversal, allowing unauthorized access to sensitive information within the system
Affected Software
1 affected component
Yonyou YonBIP<v3
Event History
Jan 9, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-66744?
The severity of CVE-2025-66744 is critical due to the potential unauthorized access to sensitive system information.
2
How do I fix CVE-2025-66744?
To fix CVE-2025-66744, upgrade to the latest version of Yonyou YonBIP beyond v3, where the vulnerability has been addressed.
3
What are the consequences of exploiting CVE-2025-66744?
Exploiting CVE-2025-66744 can lead to unauthorized access to sensitive data within the Yonyou YonBIP system.
4
Which versions of Yonyou YonBIP are affected by CVE-2025-66744?
Yonyou YonBIP versions up to and including v3 are affected by CVE-2025-66744.
5
What type of vulnerability is CVE-2025-66744?
CVE-2025-66744 is a path traversal vulnerability in the LoginWithV8 interface of Yonyou YonBIP.