CVE-2025-65530

An eval injection in the malware de-obfuscation routines of CloudLinux ai-bolit before v32.7.4 allows attackers to overwrite arbitrary files as root via scanning a crafted file.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2025-12-12

Last modified

2026-10-14

Weaknesses

CWE-95

Affected products

• Ai-bolit (Cloudlinux)

References

• https://blog.imunify360.com/security-advisory-imunify-ai-bolit-vulnerability