CVE-2025-66200CWE-288

CVE-2025-66200

Medium · published December 5, 2025

CVSS v3.1
5.4
EPSS
1%
Percentile
50.5
In the wild
Unconfirmed
What it is

mod_userdir+suexec bypass via AllowOverride FileInfo vulnerability in Apache HTTP Server. Users with access to use the RequestHeader directive in htaccess can cause some CGI scripts to run under an unexpected userid.

This issue affects Apache HTTP Server: from 2.4.7 through 2.4.65.

Users are recommended to upgrade to version 2.4.66, which fixes the issue.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00650 · 50.5th percentile
Weakness
CWE-288 · Authentication Bypass Using an Alternate Path or Channel
Published
2025-12-05T16:15Z
Affected products (1)
ProductVersionsFixed in
apache/http_server≥ 2.4.7, < 2.4.662.4.66
References (2)
https://httpd.apache.org/security/vulnerabilities_24.html · [email protected]http://www.openwall.com/lists/oss-security/2025/12/04/8 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 05 DEC 11:02Z
    Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo
    cvelistv5