CVE-2025-27591

The Below Linux system monitoring tool (versions prior to v0.9.0 ) is vulnerable to a local privilege escalation due to insecure log directory permissions. The service creates a world-writable directory at /var/log/below and a log file /var/log/below/error_root.log with 0666 permissions. This con...