CVE-2025-66172

The CloudStack Backup plugin versions 4.21.0.0 and 4.22.0.0 contain an improper access logic vulnerability. This flaw allows any authenticated user with access to specific APIs to restore a volume from another user's backups and attach it to their own virtual machines in environments where the pl...