CVE-2025-65530
High
Description
An eval injection in the malware de-obfuscation routines of CloudLinux ai-bolit before v32.7.4 allows attackers to overwrite arbitrary files as root via scanning a crafted file.
SeverityHigh
CVSS8.8
Exploit probability—
ProductCloudlinux Ai-bolit
PublishedDec 12, 2025
First seenDec 12, 2025
Weakness typeCWE-95CWE-95
How to fix
Update
- cloudlinux ai-bolit32.7.4-1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cloudlinux ai-bolit | v < 32.7.4-1 | 32.7.4-1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.