CVE-2025-14282

A flaw was found in Dropbear. When running in multi-user mode and authenticating users, the dropbear ssh server does the socket forwardings requested by the remote client as root, only switching to the logged-in user upon spawning a shell or performing some operations like reading the user's file...

PT-2025-51833

Name of the Vulnerable Software and Affected Versions Dropbear versions 2024.84 through 2025.88 Description A flaw exists in Dropbear when operating in multi-user mode and authenticating users. The Dropbear SSH server performs socket forwardings as root, switching to the logged-in user only when ...