CVEvulnerability

CVE-2025-5689

8.5 HIGH Published 2025-06-16 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-06-16
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
Weaknesses
CWE-269

Description

A flaw was found in the temporary user record that authd uses in the pre-auth NSS. As a result, a user login for the first time will be considered to be part of the root group in the context of that SSH session.

Affected configurations

• canonical authd (< 0.5.4)

Related

Weakness · CWE (1)

  • CWE-269 Improper Privilege Management weakness

References