CVE-2025-41761 — Privilege escalation possible
A low‑privileged local attacker who gains access to the UBR service account (e.g., via SSH) can escalate privileges to obtain full system access. This is due to the service acco…
Published: 2026-03-09 · CVSS: 7.8 · CVSS 3.1
A low‑privileged local attacker who gains access to the UBR service account (e.g., via SSH) can escalate privileges to obtain full system access. This is due to the service account being permitted to execute certain binaries (e.g., tcpdump and ip) with sudo.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7