CVE-2025-66360
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
An issue was discovered in Logpoint before 7.7.0. An improperly configured access control policy exposes sensitive Logpoint internal service (Redis) information to li-admin users. This can lead to privilege escalation.
Risk Assessment
Exposure of sensitive internal information could allow li-admin users to escalate privileges and access critical system resources.
Recommendation
Update Logpoint to version 7.7.0 or later. Fix access control policy configurations to restrict access to internal services.
Other vulnerabilities in Logpoint
See all- CVE-2025-66361Medium
An issue was discovered in Logpoint before 7.7.0. Sensitive information is exposed in System Processes for an extended period during high CPU load.
- CVE-2025-66359High
An issue was discovered in Logpoint before 7.7.0 where insufficient input validation and lack of output escaping in multiple components leads to a cross-site scripting (XSS) vulnerability.
Original NVD description (English source)
An issue was discovered in Logpoint before 7.7.0. An improperly configured access control policy exposes sensitive Logpoint internal service (Redis) information to li-admin users. This can lead to privilege escalation.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS