Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2025-5689

Improper Permission Management in SSH Session Handling

Description

A flaw was found in the temporary user record that authd uses in the pre-auth NSS. As a result, a user login for the first time will be considered to be part of the root group in the context of that SSH session.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Canonical authd

Default version status: unaffected

  • 0.0.0 to ≤ 0.5.4affected

References