CVE-2025-5689

creationtimestamp| type| source ---|---|--- 2025-06-16 12:42:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18446 2025-06-16 19:42:38+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114694747478598696 2025-06-16 19:47:13+00:00| seen|...

CVE-2025-5689

A flaw was found in the temporary user record that authd uses in the pre-auth NSS. As a result, a user login for the first time will be considered to be part of the root group in the context of that SSH session...

CVE-2025-5689

CVE-2025-5689 concerns ubuntu/authd and related components. A flaw in the temporary user record used by authd during pre-auth NSS can cause a first-time SSH login to place the new user into the root group for that SSH session, potentially exposing root-group read/write access during that session....

CVE-2025-5689 Improper Permission Management in SSH Session Handling

A flaw was found in the temporary user record that authd uses in the pre-auth NSS. As a result, a user login for the first time will be considered to be part of the root group in the context of that SSH session...