CVE-2025-66172

The Apache CloudStack Backup plugin versions 4.21.0.0 and 4.22.0.0 are affected by an improper access logic flaw. Authenticated users with access to specific APIs can exploit this vulnerability to restore a volume from another user's backups and attach it to their own virtual machines. This risk ...