CVE-2025-5791 — Users: `root` appended to group listings
A flaw was found in the user's crate for Rust. This vulnerability allows privilege escalation via incorrect group listing when a user or process has fewer than exactly 1024 grou…
Published: 2025-06-06 · CVSS: 7.1 · CVSS 3.1
A flaw was found in the user's crate for Rust. This vulnerability allows privilege escalation via incorrect group listing when a user or process has fewer than exactly 1024 groups, leading to the erroneous inclusion of the root group in the access list.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7