CVE-2025-66200

MEDIUM5.4

Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo

Published Dec 5, 2025

Modified 1 months ago

Details

mod_userdir+suexec bypass via AllowOverride FileInfo vulnerability in Apache HTTP Server. Users with access to use the RequestHeader directive in htaccess can cause some CGI scripts to run under an unexpected userid.

This issue affects Apache HTTP Server: from 2.4.7 through 2.4.65.

Users are recommended to upgrade to version 2.4.66, which fixes the issue.

References

WEBhttp://www.openwall.com/lists/oss-security/2025/12/04/8 ADVISORYhttps://httpd.apache.org/security/vulnerabilities_24.html ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-66200

CVSS Analysis

CVSS v3.1

5.4

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

NoneC:N

Integrity

LowI:L

Availability

LowA:L

5.4/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Ecosystems

Timeline

PublishedDec 5, 2025

ModifiedDec 5, 2025