Trytond vulnerabilities

2 known vulnerabilities in Trytond from Tryton. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  trytond: Incorrect Authorization

  CVE-2025-66423Nov 30, 2025Tryton

  Tryton trytond 6.0 before 7.6.11 does not enforce access rights for the route of the HTML editor. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.70.

• 7.5 High severity

  Proteus: Improper Restriction of Recursive Entity References in DTDs

  CVE-2022-26662Mar 10, 2022TrytonEPSS 1.97%

  An XML Entity Expansion (XEE) issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x and 6.2.x through 6.2.5, and Tryton Application Platform (Command Line Client (proteus)) 5.x through 5.0.11, 6.x throug