---
id: CVE-2025-66360
title: An issue was discovered in Logpoint before 7.7.0
summary: >-
  An issue was discovered in Logpoint before 7.7.0. An improperly configured
  access control policy exposes sensitive Logpoint internal service (Redis)
  information to li-admin users. This can lead to privilege escalation.
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-863
vendor: logpoint
product: siem
affected:
  - siem < 7.7.0
patched:
  - siem 7.7.0
published: '2025-11-28'
updated: '2026-10-08'
sourceUpdated: '2026-10-08T10:10:00.227'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-66360'
references:
  - url: >-
      https://servicedesk.logpoint.com/hc/en-us/articles/29160917867549-Redis-communication-exposed-for-internal-communication
    label: cve@mitre.org
tags:
  - nvd
epss: 0.00296
epssPercentile: 0.2036
ingestedAt: '2026-10-08T10:28:22.967Z'
---

## Overview

An issue was discovered in Logpoint before 7.7.0. An improperly configured access control policy exposes sensitive Logpoint internal service (Redis) information to li-admin users. This can lead to privilege escalation.

## Affected

- `siem < 7.7.0`

## Remediation

Upgrade past the affected range:

- `siem 7.7.0`