CVE-2025-65530

Published: Dec 12, 2025Modified: Jul 5, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

An eval injection in the malware de-obfuscation routines of CloudLinux ai-bolit before v32.7.4 allows attackers to overwrite arbitrary files as root via scanning a crafted file.

Affected (1)

Products: Cloudlinux: Ai Bolit

Cloudlinux

1 product

Ai Bolit

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Cloudlinux Ai Bolit	Before 32.7.4-1

Related CWEs

CWE-95

Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')

The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes code syntax before using the input in a dynamic evaluation call (e.g. "eval").

References (1)

https://blog.imunify360.com/security-advisory-imunify-ai-bolit-vulnerability

Source: cve@mitre.org

Third Party Advisory

Timeline

No history available yet.