Moderate severityNVD Advisory· Published Nov 30, 2025· Updated Dec 1, 2025
CVE-2025-66422
CVE-2025-66422
Description
Tryton trytond before 7.6.11 allows remote attackers to obtain sensitive trace-back (server setup) information. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.70.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
trytondPyPI | >= 7.5.0, < 7.6.11 | 7.6.11 |
trytondPyPI | >= 7.1.0, < 7.4.21 | 7.4.21 |
trytondPyPI | >= 7.0.0, < 7.0.40 | 7.0.40 |
trytondPyPI | < 6.0.70 | 6.0.70 |
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4News mentions
0No linked articles in our index yet.