Apache HTTP Server 2.4.765 AllowOverride FileInfo Bypass
CVE-2025-66200 Published on December 5, 2025

Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo
mod_userdir+suexec bypass via AllowOverride FileInfo vulnerability in Apache HTTP Server. Users with access to use the RequestHeader directive in htaccess can cause some CGI scripts to run under an unexpected userid. This issue affects Apache HTTP Server: from 2.4.7 through 2.4.65. Users are recommended to upgrade to version 2.4.66, which fixes the issue.

Vendor Advisory NVD

Vulnerability Analysis

CVE-2025-66200 is exploitable with network access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality, with no impact on integrity and availability.

Exploitation:
NONE
Automatable:
NO
Technical Impact:
PARTIAL
Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
LOW
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
NONE
Integrity Impact:
LOW
Availability Impact:
LOW

Timeline

reported

fixed in 2.4.x by r1930168 12 days later.

Weakness Type

Authentication Bypass Using an Alternate Path or Channel

A product requires authentication, but the product has an alternate path or channel that does not require authentication.


Products Associated with CVE-2025-66200

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2025-66200 are published in these products:

Apache HTTP Server
Microsoft Http Server
F5 Networks Http Server
Oracle
Canonical Ubuntu Linux
Red Hat Http Server
Apple macOS
Apple Macos Sonoma

Affected Versions

Apache Software Foundation Apache HTTP Server:

Exploit Probability

EPSS
0.70%
Percentile
53.60%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.