CVE-2025-1131: Uncontrolled Search Path Element

A local privilege escalation vulnerability exists in the safeasterisk script included with the Asterisk toolkit package. When Asterisk is started via this script common in SysV init or FreePBX environments, it sources all .sh files located in /etc/asterisk/startup.d/ as root, without validating...

PT-2025-39117

Name of the Vulnerable Software and Affected Versions Asterisk toolkit affected versions not specified Description A local privilege escalation issue exists in the safe asterisk script. When Asterisk starts using this script, it executes all .sh files in the /etc/asterisk/startup.d/ directory as...