Apache Tomcat Path Traversal Vulnerability (CVE-2025-55752) Notice

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Apache Tomcat Vulnerabilities CVE-2025-55752 and CVE-2025-55754 Disclosed The Apache Software Foundation has announced two critical vulnerabilities, CVE-2025-55752 and CVE-2025-55754, affecting Apache Tomcat versions 9, 10, and 11. CVE-2025-55752 is a directory traversal vulnerability that can lead to remote code execution, classified as 'Important' severity. System administrators are advised to take immediate action to mitigate these risks. 2 sources 44