CVE-2025-52923

Description

Sangfor aTrust through 2.4.10 allows users to modify the ExecStartPre command.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://github.com/r00t7oo2jm/cVetest/blob/main/p0c.sh ↗
• https://github.com/r00t7oo2jm/cVetest/blob/main/sangf0r-poc.pdf ↗
• https://marketplace.huaweicloud.com/intl/contents/10d76e5f-57b5-4780-9c0c-58af8f7f71e6 ↗
• https://community.sangfor.com/forum.php?mod=viewthread&tid=10842 ↗