CVEvulnerability

CVE-2025-12801

6.5 MEDIUM Published 2026-03-04 Modified 2026-10-16 Official page ↗
Status
Modified
Published
2026-03-04
Last modified
2026-10-16
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-279, CWE-732

Description

A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned to it in the /etc/exports file at mount time. In particular, it allows the client to access any subdirectory or subtree of an exported directory, regardless of the set file permissions, and regardless of any 'root_squash' or 'all_squash' attributes that would normally be expected to apply to that client.

Affected configurations

• redhat openshift container platform 4.0 • redhat enterprise linux 6.0 • redhat enterprise linux 7.0 • redhat enterprise linux 8.0 • redhat enterprise linux 9.0 • redhat enterprise linux 10.0 • linux-nfs nfs-utils

Related

Weakness · CWE (2)

  • CWE-279 Incorrect Execution-Assigned Permissions weakness
  • CWE-732 Incorrect Permission Assignment for Critical Resource weakness

References