CVE-2025-5689 — Improper Permission Management in SSH Session Handling
A flaw was found in the temporary user record that authd uses in the pre-auth NSS. As a result, a user login for the first time will be considered to be part of the root group i…
Published: 2025-06-16 · CVSS: 8.5 · CVSS 3.1
A flaw was found in the temporary user record that authd uses in the pre-auth NSS. As a result, a user login for the first time will be considered to be part of the root group in the context of that SSH session.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7