July 25, 2026

CVE Watchtower


← Back to CVE List

CVE-2025-14338NVD

Vulnerability Summary

Polkit authentication dis isabled by default and a race
condition in the Polkit authorization check in versions before v0.69.0 can
lead to the same issues as in CVE-2025-66005.
Severity Level
HIGH(8.5)
Published Date
Jan 14, 2026
Last Modified
Jan 14, 2026
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
Data Pending
Root Weakness (CWE)
CWE-284: Unknown/Unlisted Weakness ↗
Refer to the official MITRE database for detailed architectural specifications regarding this weakness.
CVSS v4.0 Base Metrics
Attack VectorLocal
Attack ComplexityLow
Privileges RequiredNone

External References