CVE-2025-25269NVD

An unauthenticated local attacker can inject a command that is subsequently executed as root, leading to a privilege escalation.

Severity Level

HIGH(8.4)

Published Date

Jul 8, 2025

Last Modified

Jul 11, 2025

Exploitation Status

????

EPSS Score (30-Day)

Data Pending

Root Weakness (CWE)

The software constructs all or part of an OS command using externally-influenced input, but does not properly neutralize special elements.

CVSS v3.1 Base Metrics

Attack VectorLocal

Attack ComplexityLow

Privileges RequiredNone

User InteractionNone

ScopeUnchanged

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

CVE Watchtower