What is the CVSS score of CVE-2025-40909?

CVE-2025-40909 has a CVSS 3.1 base score of 5.9 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L. EPSS exploitation probability: 0.0%.

How to fix or mitigate CVE-2025-40909?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

CVE-2025-40909

MEDIUM

Untrusted Search Path (CWE-426)

2025-05-30 9b29abf9-4ab0-4765-b253-1875cd9b441e

Information Disclosure

5.9

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.9 MEDIUM

AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

SUSE

MEDIUM

qualitative

Red Hat

5.9 MEDIUM

qualitative

Primary rating from NVD.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

Low

Lifecycle Timeline

Patch released

Apr 06, 2026 - 02:30 nvd

Patch available

Analysis Generated

Mar 28, 2026 - 18:44 vuln.today

CVE Published

May 30, 2025 - 13:15 nvd

MEDIUM 5.9

DescriptionCVE.org

Perl threads have a working directory race condition where file operations may target unintended paths.

If a directory handle is open at thread creation, the process-wide current working directory is temporarily changed in order to clone that handle for the new thread, which is visible from any third (or more) thread already running.

This may lead to unintended operations such as loading code or accessing files from unexpected locations, which a local attacker may be able to exploit.

The bug was introduced in commit 11a11ecf4bea72b17d250cfb43c897be1341861e and released in Perl version 5.13.6

AnalysisAI

Perl threads have a working directory race condition where file operations may target unintended paths. Rated medium severity (CVSS 5.9), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-426. Perl threads have a working directory race condition where file operations may target unintended paths. If a directory handle is open at thread creation, the process-wide current working directory is temporarily changed in order to clone that handle for the new thread, which is visible from any third (or more) thread already running. This may lead to unintended operations such as loading code or accessing files from unexpected locations, which a local attacker may be able to exploit. The bug was introduced in commit 11a11ecf4bea72b17d250cfb43c897be1341861e and released in Perl version 5.13.6 Version information: version 5.13.6.

Affected ProductsAI

See vendor advisory for affected versions.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

Same weakness CWE-426 – Untrusted Search Path

View all

CVE-2015-0096 CRITICAL POC

9.3

CVE-2012-1854 HIGH POC

7.8

CVE-2016-5330 HIGH POC

7.8

CVE-2019-11660 HIGH POC

7.8

CVE-2017-12414 CRITICAL POC

9.8

CVE-2025-26155 CRITICAL POC

9.8

CVE-2023-30330 CRITICAL POC

9.8

CVE-2023-26036 CRITICAL POC

9.8

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2023-7028 CRITICAL POC

10.0

CVE-2017-0213 HIGH POC

7.3

Vendor StatusVendor

SUSE

Severity: Medium

Product	Status
Container bci/kiwi:9.24.43-16.8 Container suse/hpc/warewulf4-x86_64/sle-hpc-node:15.7.20.5.1 Container suse/manager/5.0/x86_64/proxy-httpd:5.0.5.1.7.26.2 Container suse/manager/5.0/x86_64/proxy-salt-broker:5.0.5.1.7.28.2 Container suse/manager/5.0/x86_64/proxy-squid:5.0.5.1.7.26.1 Container suse/manager/5.0/x86_64/server-hub-xmlrpc-api:5.0.5.1.6.26.1 Container suse/multi-linux-manager/5.1/x86_64/proxy-httpd:5.1.0.6.27 Container suse/multi-linux-manager/5.1/x86_64/proxy-salt-broker:5.1.0.7.32 Container suse/multi-linux-manager/5.1/x86_64/proxy-squid:5.1.0.6.21 Container suse/multi-linux-manager/5.1/x86_64/server-hub-xmlrpc-api:5.1.0.6.21 Container suse/multi-linux-manager/5.1/x86_64/server-saline:5.1.2.9.13.1 Container suse/sle-micro-rancher/5.2:latest Container suse/sle-micro-rancher/5.3:latest Container suse/sle-micro-rancher/5.4:5.4.4.5.6 Container suse/sle-micro/base-5.5:2.0.4-5.8.179 Container suse/sle-micro/kvm-5.5:2.0.4-3.5.344 Container trento/trento-wanda:1.5.0-build1.29.1 Container trento/trento-web:2.5.0-build4.52.1 Image SLES15-SP3-Micro-5-2-BYOS-Azure Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM Image SLES15-SP3-Micro-5-2-BYOS-GCE Image proxy-httpd-image Image proxy-salt-broker-image Image proxy-squid-image Image server-hub-xmlrpc-api-image Image server-saline-image	Affected
Container bci/spack:0.23.1-11.4 Container containers/lmcache-lmstack-router:0.1.6-1.2 Container containers/open-webui-pipelines:0.20250329.151219-5.8 Container private-registry/harbor-nginx:1.21.5-2.15 Container private-registry/harbor-portal:1.1.0-1.1 Container suse/manager/5.0/x86_64/server-migration-14-16:5.0.4.1.7.20.1 Container suse/manager/5.0/x86_64/server:5.0.4.1.7.27.2 Container suse/mariadb:10.11.11-68.2 Container suse/multi-linux-manager/5.1/x86_64/server-migration-14-16:5.1.0.6.27 Container suse/multi-linux-manager/5.1/x86_64/server:5.1.0.6.40 Container suse/sle-micro/5.1/toolbox:14.2-3.13.136 Container suse/sle-micro/5.2/toolbox:14.2-7.11.138 Container suse/sle-micro/5.3/toolbox:14.2-6.11.144 Container suse/sle-micro/5.4/toolbox:14.2-5.19.144 Container suse/sle-micro/5.5/toolbox:14.2-3.12.47 Container suse/sle-micro/5.5:2.0.4-5.5.310 Container suse/sle-micro/rt-5.5:2.0.4-4.5.409 Image SLES15-SP4-BYOS Image SLES15-SP4-BYOS-Azure Image SLES15-SP4-BYOS-EC2 Image SLES15-SP4-BYOS-GCE Image SLES15-SP4-CHOST-BYOS Image SLES15-SP4-CHOST-BYOS-Aliyun Image SLES15-SP4-CHOST-BYOS-Azure Image SLES15-SP4-CHOST-BYOS-EC2 Image SLES15-SP4-CHOST-BYOS-GCE Image SLES15-SP4-CHOST-BYOS-SAP-CCloud Image SLES15-SP4-HPC-BYOS Image SLES15-SP4-HPC-BYOS-Azure Image SLES15-SP4-HPC-BYOS-EC2 Image SLES15-SP4-HPC-BYOS-GCE Image SLES15-SP4-HPC-EC2 Image SLES15-SP4-HPC-GCE Image SLES15-SP4-Hardened-BYOS Image SLES15-SP4-Hardened-BYOS-Azure Image SLES15-SP4-Hardened-BYOS-EC2 Image SLES15-SP4-Hardened-BYOS-GCE Image SLES15-SP4-Manager-Proxy-4-3-BYOS Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE Image SLES15-SP4-Manager-Server-4-3-BYOS Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE Image SLES15-SP4-Micro-5-3 Image SLES15-SP4-Micro-5-3-BYOS Image SLES15-SP4-Micro-5-3-BYOS-Azure Image SLES15-SP4-Micro-5-3-BYOS-EC2 Image SLES15-SP4-Micro-5-3-BYOS-GCE Image SLES15-SP4-Micro-5-3-EC2 Image SLES15-SP4-Micro-5-4 Image SLES15-SP4-Micro-5-4-BYOS Image SLES15-SP4-Micro-5-4-BYOS-Azure Image SLES15-SP4-Micro-5-4-BYOS-EC2 Image SLES15-SP4-Micro-5-4-BYOS-GCE Image SLES15-SP4-Micro-5-4-EC2 Image SLES15-SP4-Micro-5-4-GCE Image SLES15-SP4-SAP Image SLES15-SP4-SAP-Azure Image SLES15-SP4-SAP-Azure-LI-BYOS Image SLES15-SP4-SAP-Azure-LI-BYOS-Production Image SLES15-SP4-SAP-Azure-VLI-BYOS Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production Image SLES15-SP4-SAP-BYOS Image SLES15-SP4-SAP-BYOS-Azure Image SLES15-SP4-SAP-BYOS-EC2 Image SLES15-SP4-SAP-BYOS-GCE Image SLES15-SP4-SAP-EC2 Image SLES15-SP4-SAP-GCE Image SLES15-SP4-SAP-Hardened Image SLES15-SP4-SAP-Hardened-Azure Image SLES15-SP4-SAP-Hardened-BYOS Image SLES15-SP4-SAP-Hardened-BYOS-Azure Image SLES15-SP4-SAP-Hardened-BYOS-EC2 Image SLES15-SP4-SAP-Hardened-BYOS-GCE Image SLES15-SP4-SAP-Hardened-GCE Image SLES15-SP4-SAPCAL Image SLES15-SP4-SAPCAL-Azure Image SLES15-SP4-SAPCAL-EC2 Image SLES15-SP4-SAPCAL-GCE Image SLES15-SP5-Azure-3P Image SLES15-SP5-Azure-Basic Image SLES15-SP5-Azure-Standard Image SLES15-SP5-BYOS-Azure Image SLES15-SP5-BYOS-EC2 Image SLES15-SP5-BYOS-GCE Image SLES15-SP5-CHOST-BYOS-Aliyun Image SLES15-SP5-CHOST-BYOS-Azure Image SLES15-SP5-CHOST-BYOS-EC2 Image SLES15-SP5-CHOST-BYOS-GCE Image SLES15-SP5-CHOST-BYOS-GDC Image SLES15-SP5-CHOST-BYOS-SAP-CCloud Image SLES15-SP5-EC2 Image SLES15-SP5-GCE Image SLES15-SP5-HPC-Azure Image SLES15-SP5-HPC-BYOS-Azure Image SLES15-SP5-HPC-BYOS-EC2 Image SLES15-SP5-HPC-BYOS-GCE Image SLES15-SP5-Hardened-BYOS-Azure Image SLES15-SP5-Hardened-BYOS-EC2 Image SLES15-SP5-Hardened-BYOS-GCE Image SLES15-SP5-Manager-Proxy-5-0-BYOS Image SLES15-SP5-Manager-Proxy-5-0-BYOS-Azure Image SLES15-SP5-Manager-Proxy-5-0-BYOS-EC2 Image SLES15-SP5-Manager-Proxy-5-0-BYOS-GCE Image SLES15-SP5-Manager-Server-5-0 Image SLES15-SP5-Manager-Server-5-0-Azure-llc Image SLES15-SP5-Manager-Server-5-0-Azure-ltd Image SLES15-SP5-Manager-Server-5-0-BYOS Image SLES15-SP5-Manager-Server-5-0-BYOS-Azure Image SLES15-SP5-Manager-Server-5-0-BYOS-EC2 Image SLES15-SP5-Manager-Server-5-0-BYOS-GCE Image SLES15-SP5-Manager-Server-5-0-EC2-llc Image SLES15-SP5-Manager-Server-5-0-EC2-ltd Image SLES15-SP5-Micro-5-5 Image SLES15-SP5-Micro-5-5-Azure Image SLES15-SP5-Micro-5-5-BYOS Image SLES15-SP5-Micro-5-5-BYOS-Azure Image SLES15-SP5-Micro-5-5-BYOS-EC2 Image SLES15-SP5-Micro-5-5-BYOS-GCE Image SLES15-SP5-Micro-5-5-EC2 Image SLES15-SP5-Micro-5-5-GCE Image SLES15-SP5-SAP-Azure-3P Image SLES15-SP5-SAP-Azure-LI-BYOS Image SLES15-SP5-SAP-Azure-LI-BYOS-Production Image SLES15-SP5-SAP-Azure-VLI-BYOS Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production Image SLES15-SP5-SAP-BYOS-Azure Image SLES15-SP5-SAP-BYOS-EC2 Image SLES15-SP5-SAP-BYOS-GCE Image SLES15-SP5-SAP-Hardened-Azure Image SLES15-SP5-SAP-Hardened-BYOS-Azure Image SLES15-SP5-SAP-Hardened-BYOS-EC2 Image SLES15-SP5-SAP-Hardened-BYOS-GCE Image SLES15-SP5-SAP-Hardened-GCE Image SLES15-SP5-SAPCAL-Azure Image SLES15-SP5-SAPCAL-EC2 Image SLES15-SP5-SAPCAL-GCE Image SLES15-SP6 Image SLES15-SP6-Azure-3P Image SLES15-SP6-Azure-Basic Image SLES15-SP6-Azure-Standard Image SLES15-SP6-BYOS Image SLES15-SP6-BYOS-Azure Image SLES15-SP6-BYOS-EC2 Image SLES15-SP6-BYOS-GCE Image SLES15-SP6-CHOST-BYOS Image SLES15-SP6-CHOST-BYOS-Aliyun Image SLES15-SP6-CHOST-BYOS-Azure Image SLES15-SP6-CHOST-BYOS-EC2 Image SLES15-SP6-CHOST-BYOS-GCE Image SLES15-SP6-CHOST-BYOS-GDC Image SLES15-SP6-CHOST-BYOS-SAP-CCloud Image SLES15-SP6-EC2 Image SLES15-SP6-EC2-ECS-HVM Image SLES15-SP6-GCE Image SLES15-SP6-HPC Image SLES15-SP6-HPC-Azure Image SLES15-SP6-HPC-BYOS Image SLES15-SP6-HPC-BYOS-Azure Image SLES15-SP6-HPC-BYOS-EC2 Image SLES15-SP6-HPC-BYOS-GCE Image SLES15-SP6-HPC-EC2 Image SLES15-SP6-HPC-GCE Image SLES15-SP6-Hardened-BYOS Image SLES15-SP6-Hardened-BYOS-Azure Image SLES15-SP6-Hardened-BYOS-EC2 Image SLES15-SP6-Hardened-BYOS-GCE Image SLES15-SP6-SAP Image SLES15-SP6-SAP-Azure Image SLES15-SP6-SAP-Azure-3P Image SLES15-SP6-SAP-Azure-LI-BYOS Image SLES15-SP6-SAP-Azure-LI-BYOS-Production Image SLES15-SP6-SAP-Azure-VLI-BYOS Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production Image SLES15-SP6-SAP-BYOS Image SLES15-SP6-SAP-BYOS-Azure Image SLES15-SP6-SAP-BYOS-EC2 Image SLES15-SP6-SAP-BYOS-GCE Image SLES15-SP6-SAP-EC2 Image SLES15-SP6-SAP-GCE Image SLES15-SP6-SAP-Hardened Image SLES15-SP6-SAP-Hardened-Azure Image SLES15-SP6-SAP-Hardened-BYOS Image SLES15-SP6-SAP-Hardened-BYOS-Azure Image SLES15-SP6-SAP-Hardened-BYOS-EC2 Image SLES15-SP6-SAP-Hardened-BYOS-GCE Image SLES15-SP6-SAP-Hardened-EC2 Image SLES15-SP6-SAP-Hardened-GCE Image SLES15-SP6-SAPCAL Image SLES15-SP6-SAPCAL-Azure Image SLES15-SP6-SAPCAL-EC2 Image SLES15-SP6-SAPCAL-GCE Image SLES15-SP7-Azure-3P Image SLES15-SP7-Azure-Basic Image SLES15-SP7-Azure-Standard Image SLES15-SP7-BYOS-Azure Image SLES15-SP7-BYOS-EC2 Image SLES15-SP7-BYOS-GCE Image SLES15-SP7-CHOST-BYOS-Aliyun Image SLES15-SP7-CHOST-BYOS-Azure Image SLES15-SP7-CHOST-BYOS-EC2 Image SLES15-SP7-CHOST-BYOS-GCE Image SLES15-SP7-CHOST-BYOS-GDC Image SLES15-SP7-CHOST-BYOS-SAP-CCloud Image SLES15-SP7-EC2 Image SLES15-SP7-EC2-ECS-HVM Image SLES15-SP7-GCE Image SLES15-SP7-GCE-3P Image SLES15-SP7-HPC-Azure Image SLES15-SP7-HPC-BYOS-Azure Image SLES15-SP7-HPC-BYOS-EC2 Image SLES15-SP7-HPC-BYOS-GCE Image SLES15-SP7-Hardened-BYOS-Azure Image SLES15-SP7-Hardened-BYOS-EC2 Image SLES15-SP7-Hardened-BYOS-GCE Image SLES15-SP7-SAP-Azure Image SLES15-SP7-SAP-Azure-3P Image SLES15-SP7-SAP-Azure-LI-BYOS-Production Image SLES15-SP7-SAP-Azure-VLI-BYOS-Production Image SLES15-SP7-SAP-BYOS-Azure Image SLES15-SP7-SAP-BYOS-EC2 Image SLES15-SP7-SAP-BYOS-GCE Image SLES15-SP7-SAP-EC2 Image SLES15-SP7-SAP-GCE Image SLES15-SP7-SAP-GCE-3P Image SLES15-SP7-SAP-Hardened-Azure Image SLES15-SP7-SAP-Hardened-BYOS-Azure Image SLES15-SP7-SAP-Hardened-BYOS-EC2 Image SLES15-SP7-SAP-Hardened-BYOS-GCE Image SLES15-SP7-SAP-Hardened-GCE Image SLES15-SP7-SAPCAL-Azure Image SLES15-SP7-SAPCAL-EC2 Image SLES15-SP7-SAPCAL-GCE Image server-database-migration-image Image server-image Image server-migration-14-16-image	Affected
Container suse/ltss/sle12.5/sles12sp5:8.5.95	Affected
Container suse/sl-micro/6.0/baremetal-os-container:2.1.3-6.46 Container suse/sl-micro/6.1/baremetal-os-container:2.2.1-7.2 Image SL-Micro-Azure Image SL-Micro-BYOS-Azure Image SL-Micro-BYOS-EC2 Image SL-Micro-BYOS-GCE Image SL-Micro-EC2 Image SUSE-Multi-Linux-Manager-Proxy-BYOS-Azure Image SUSE-Multi-Linux-Manager-Proxy-BYOS-EC2 Image SUSE-Multi-Linux-Manager-Proxy-BYOS-GCE Image SUSE-Multi-Linux-Manager-Server-Azure-llc Image SUSE-Multi-Linux-Manager-Server-Azure-ltd Image SUSE-Multi-Linux-Manager-Server-BYOS-Azure Image SUSE-Multi-Linux-Manager-Server-BYOS-EC2 Image SUSE-Multi-Linux-Manager-Server-BYOS-GCE Image SUSE-Multi-Linux-Manager-Server-EC2-llc Image SUSE-Multi-Linux-Manager-Server-EC2-ltd	Affected
Container suse/sl-micro/6.0/base-os-container:2.1.3-7.14 Image SL-Micro-Base Image SL-Micro-Base-RT Image SL-Micro-Base-RT-SelfInstall Image SL-Micro-Base-RT-encrypted Image SL-Micro-Base-SelfInstall Image SL-Micro-Base-encrypted Image SL-Micro-Base-qcow	Affected

CVE-2025-40909 vulnerability details – vuln.today

Back

Container suse/sl-micro/6.0/kvm-os-container:2.1.3-6.41 Container suse/sl-micro/6.0/rt-os-container:2.1.3-7.48 Container suse/sl-micro/6.1/base-os-container:2.2.1-5.66	Affected
Container suse/sl-micro/6.0/toolbox:13.2-9.8 Image SL-Micro Image SL-Micro-Default Image SL-Micro-Default-SelfInstall Image SL-Micro-Default-encrypted Image SL-Micro-Default-qcow Image SLE-Micro Image SLE-Micro-Azure Image SLE-Micro-BYOS Image SLE-Micro-BYOS-Azure Image SLE-Micro-BYOS-EC2 Image SLE-Micro-BYOS-GCE Image SLE-Micro-EC2 Image SLE-Micro-GCE	Affected
Image SLES12-SP5-Azure-BYOS Image SLES12-SP5-Azure-HPC-BYOS Image SLES12-SP5-Azure-HPC-On-Demand Image SLES12-SP5-Azure-SAP-BYOS Image SLES12-SP5-Azure-SAP-On-Demand Image SLES12-SP5-Azure-Standard-On-Demand Image SLES12-SP5-EC2-BYOS Image SLES12-SP5-EC2-ECS-On-Demand Image SLES12-SP5-EC2-On-Demand Image SLES12-SP5-EC2-SAP-BYOS Image SLES12-SP5-EC2-SAP-On-Demand Image SLES12-SP5-GCE-BYOS Image SLES12-SP5-GCE-On-Demand Image SLES12-SP5-GCE-SAP-BYOS Image SLES12-SP5-GCE-SAP-On-Demand Image SLES12-SP5-SAP-Azure-LI-BYOS-Production Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production	Affected
SUSE Liberty Linux 8	Fixed
SUSE Liberty Linux 9	Fixed
SUSE Linux Enterprise Desktop 15 SP6 SUSE Linux Enterprise High Performance Computing 15 SP6 SUSE Linux Enterprise Server 15 SP6 SUSE Linux Enterprise Server for SAP Applications 15 SP6	Fixed
SUSE Linux Enterprise Desktop 15 SP7 SUSE Linux Enterprise High Performance Computing 15 SP7 SUSE Linux Enterprise Server 15 SP7 SUSE Linux Enterprise Server for SAP Applications 15 SP7	Fixed
SUSE Linux Enterprise Micro 5.1	Fixed
SUSE Linux Enterprise Micro 5.2	Fixed
SUSE Linux Enterprise Micro 5.3	Fixed
SUSE Linux Enterprise Micro 5.4	Fixed
SUSE Linux Enterprise Micro 5.5	Fixed
SUSE Linux Enterprise Module for Basesystem 15 SP6	Fixed
SUSE Linux Enterprise Module for Basesystem 15 SP7	Fixed
SUSE Linux Enterprise Module for Development Tools 15 SP6	Fixed
SUSE Linux Enterprise Module for Development Tools 15 SP7	Fixed
SUSE Linux Enterprise Module for Package Hub 15 SP6	Fixed
SUSE Linux Enterprise Module for Package Hub 15 SP7	Fixed
SUSE Linux Enterprise Server 16.0	Fixed
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5	Fixed
SUSE Linux Micro 6.0	Fixed
SUSE Linux Micro 6.1	Fixed
openSUSE Leap 15.6	Fixed
openSUSE Tumbleweed	Fixed
SLES15-SP5-CHOST-BYOS-SAP-CCloud	Fixed
SLES15-SP6-CHOST-BYOS	Fixed
SLES15-SP6-CHOST-BYOS-Aliyun	Fixed
SLES15-SP6-CHOST-BYOS-Azure	Fixed
SLES15-SP6-CHOST-BYOS-EC2	Fixed
SLES15-SP6-CHOST-BYOS-GCE	Fixed
SLES15-SP6-CHOST-BYOS-GDC	Fixed
SLES15-SP6-CHOST-BYOS-SAP-CCloud	Fixed
SLES15-SP7-CHOST-BYOS-Aliyun	Fixed
SLES15-SP7-CHOST-BYOS-Azure	Fixed
SLES15-SP7-CHOST-BYOS-EC2	Fixed
SLES15-SP7-CHOST-BYOS-GCE	Fixed
SLES15-SP7-CHOST-BYOS-GDC	Fixed
SLES15-SP7-CHOST-BYOS-SAP-CCloud	Fixed
SUSE Linux Enterprise Desktop 15 SP7	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP7	Fixed
SUSE Linux Enterprise Micro 5.2	Fixed
SUSE Linux Enterprise Micro 5.3	Fixed
SUSE Linux Enterprise Micro 5.4	Fixed
SUSE Linux Enterprise Micro 5.5	Fixed
SUSE Linux Enterprise Micro for Rancher 5.2	Fixed
SUSE Linux Enterprise Micro for Rancher 5.3	Fixed
SUSE Linux Enterprise Micro for Rancher 5.4	Fixed
SUSE Linux Enterprise Module for Basesystem 15 SP7	Fixed
SUSE Linux Enterprise Module for Development Tools 15 SP7	Fixed
SUSE Linux Enterprise Module for Package Hub 15 SP7	Fixed
SUSE Linux Enterprise Server 15 SP7	Fixed
SUSE Linux Enterprise Server 16.1	Fixed
SUSE Linux Enterprise Server for SAP Applications 15 SP7	Fixed
SUSE Linux Enterprise Server for SAP applications 16.1	Fixed
SUSE Linux Micro 6.0	Fixed
SUSE Linux Micro 6.1	Fixed
openSUSE Leap 15.6	Fixed
SLES15-SP3-CHOST-BYOS-Aliyun	Fixed
SLES15-SP3-CHOST-BYOS-Azure	Fixed
SLES15-SP3-CHOST-BYOS-EC2	Fixed
SLES15-SP3-CHOST-BYOS-GCE	Fixed
SLES15-SP3-CHOST-BYOS-SAP-CCloud	Fixed
SLES15-SP4-CHOST-BYOS	Fixed
SLES15-SP4-CHOST-BYOS-Aliyun	Fixed
SLES15-SP4-CHOST-BYOS-Azure	Fixed
SLES15-SP4-CHOST-BYOS-EC2	Fixed
SLES15-SP4-CHOST-BYOS-GCE	Fixed
SLES15-SP4-CHOST-BYOS-SAP-CCloud	Fixed
SLES15-SP5-CHOST-BYOS-Aliyun	Fixed
SLES15-SP5-CHOST-BYOS-Azure	Fixed
SLES15-SP5-CHOST-BYOS-EC2	Fixed
SLES15-SP5-CHOST-BYOS-GCE	Fixed
SLES15-SP5-CHOST-BYOS-GDC	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP4	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP5	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS	Fixed
SUSE Linux Enterprise Module for Basesystem 15 SP4	Fixed
SUSE Linux Enterprise Module for Basesystem 15 SP5	Fixed
SUSE Linux Enterprise Module for Basesystem 15 SP6	Fixed
SUSE Linux Enterprise Module for Development Tools 15 SP4	Fixed
SUSE Linux Enterprise Module for Development Tools 15 SP5	Fixed
SUSE Linux Enterprise Module for Development Tools 15 SP6	Fixed
SUSE Linux Enterprise Server 12 SP5	Fixed
SUSE Linux Enterprise Server 12 SP5-LTSS	Fixed
SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security	Fixed
SUSE Linux Enterprise Server 15 SP4	Fixed
SUSE Linux Enterprise Server 15 SP4-LTSS	Fixed
SUSE Linux Enterprise Server 15 SP5	Fixed
SUSE Linux Enterprise Server 15 SP5-LTSS	Fixed
SUSE Linux Enterprise Server 15 SP6	Fixed
SUSE Linux Enterprise Server 15 SP6-LTSS	Fixed
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5	Fixed
SUSE Linux Enterprise Server for SAP Applications 15 SP6	Fixed
SUSE Manager Proxy 4.3	Fixed
SUSE Manager Proxy LTS 4.3	Fixed
SUSE Manager Retail Branch Server 4.3	Fixed
SUSE Manager Retail Branch Server LTS 4.3	Fixed
SUSE Manager Server 4.3	Fixed
SUSE Manager Server LTS 4.3	Fixed
SUSE CaaS Platform 3.0	Fixed
SUSE CaaS Platform 4.0	Fixed
SUSE Enterprise Storage 6	Fixed
SUSE Enterprise Storage 7	Fixed
SUSE Enterprise Storage 7.1	Fixed
SUSE Linux Enterprise Desktop 11 SP3	Fixed
SUSE Linux Enterprise Desktop 11 SP4	Fixed
SUSE Linux Enterprise Desktop 12	Fixed
SUSE Linux Enterprise Desktop 12 SP1	Fixed
SUSE Linux Enterprise Desktop 12 SP2	Fixed
SUSE Linux Enterprise Desktop 12 SP3	Fixed
SUSE Linux Enterprise Desktop 12 SP4	Fixed
SUSE Linux Enterprise Desktop 15	Fixed
SUSE Linux Enterprise Desktop 15 SP1	Fixed
SUSE Linux Enterprise Desktop 15 SP2	Fixed
SUSE Linux Enterprise Desktop 15 SP3	Fixed
SUSE Linux Enterprise Desktop 15 SP4	Fixed
SUSE Linux Enterprise Desktop 15 SP5	Fixed
SUSE Linux Enterprise Desktop 15 SP6	Fixed
SUSE Linux Enterprise High Performance Computing 15	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP1	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP2	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP3	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP6	Fixed
SUSE Linux Enterprise High Performance Computing 15-ESPOS	Fixed
SUSE Linux Enterprise High Performance Computing 15-LTSS	Fixed
SUSE Linux Enterprise Micro 5.0	Fixed
SUSE Linux Enterprise Micro 5.1	Fixed
SUSE Linux Enterprise Module for Basesystem 15	Fixed
SUSE Linux Enterprise Module for Basesystem 15 SP1	Fixed
SUSE Linux Enterprise Module for Basesystem 15 SP2	Fixed
SUSE Linux Enterprise Module for Basesystem 15 SP3	Fixed
SUSE Linux Enterprise Module for Development Tools 15	Fixed
SUSE Linux Enterprise Module for Development Tools 15 SP1	Fixed
SUSE Linux Enterprise Module for Development Tools 15 SP2	Fixed
SUSE Linux Enterprise Module for Development Tools 15 SP3	Fixed
SUSE Linux Enterprise Module for Package Hub 15 SP1	Fixed
SUSE Linux Enterprise Module for Package Hub 15 SP2	Fixed
SUSE Linux Enterprise Module for Package Hub 15 SP3	Fixed
SUSE Linux Enterprise Module for Package Hub 15 SP4	Fixed
SUSE Linux Enterprise Module for Package Hub 15 SP5	Fixed
SUSE Linux Enterprise Module for Package Hub 15 SP6	Fixed
SUSE Linux Enterprise Point of Sale 11 SP3	Fixed
SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT	Fixed
SUSE Linux Enterprise Real Time 15 SP2	Fixed
SUSE Linux Enterprise Real Time 15 SP3	Fixed
SUSE Linux Enterprise Real Time 15 SP4	Fixed
SUSE Linux Enterprise Server 11 SP3	Fixed
SUSE Linux Enterprise Server 11 SP3-LTSS	Fixed
SUSE Linux Enterprise Server 11 SP4	Fixed
SUSE Linux Enterprise Server 11 SP4 LTSS	Fixed
SUSE Linux Enterprise Server 11 SP4-LTSS	Fixed
SUSE Linux Enterprise Server 12	Fixed
SUSE Linux Enterprise Server 12 SP1	Fixed
SUSE Linux Enterprise Server 12 SP1-LTSS	Fixed
SUSE Linux Enterprise Server 12 SP2	Fixed
SUSE Linux Enterprise Server 12 SP2-BCL	Fixed
SUSE Linux Enterprise Server 12 SP2-ESPOS	Fixed
SUSE Linux Enterprise Server 12 SP2-LTSS	Fixed
SUSE Linux Enterprise Server 12 SP3	Fixed
SUSE Linux Enterprise Server 12 SP3-BCL	Fixed
SUSE Linux Enterprise Server 12 SP3-ESPOS	Fixed
SUSE Linux Enterprise Server 12 SP3-LTSS	Fixed
SUSE Linux Enterprise Server 12 SP4	Fixed
SUSE Linux Enterprise Server 12 SP4-ESPOS	Fixed
SUSE Linux Enterprise Server 12 SP4-LTSS	Fixed
SUSE Linux Enterprise Server 12-LTSS	Fixed
SUSE Linux Enterprise Server 15	Fixed
SUSE Linux Enterprise Server 15 SP1	Fixed
SUSE Linux Enterprise Server 15 SP1-BCL	Fixed
SUSE Linux Enterprise Server 15 SP1-LTSS	Fixed
SUSE Linux Enterprise Server 15 SP2	Fixed
SUSE Linux Enterprise Server 15 SP2-BCL	Fixed
SUSE Linux Enterprise Server 15 SP2-LTSS	Fixed
SUSE Linux Enterprise Server 15 SP3	Fixed
SUSE Linux Enterprise Server 15 SP3-BCL	Fixed
SUSE Linux Enterprise Server 15 SP3-LTSS	Fixed
SUSE Linux Enterprise Server 15-LTSS	Fixed
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2	Fixed
SUSE Linux Enterprise Server for SAP Applications 11 SP3	Fixed
SUSE Linux Enterprise Server for SAP Applications 11 SP4	Fixed
SUSE Linux Enterprise Server for SAP Applications 12 SP1	Fixed
SUSE Linux Enterprise Server for SAP Applications 12 SP2	Fixed
SUSE Linux Enterprise Server for SAP Applications 12 SP3	Fixed
SUSE Linux Enterprise Server for SAP Applications 12 SP4	Fixed
SUSE Linux Enterprise Server for SAP Applications 15	Fixed
SUSE Linux Enterprise Server for SAP Applications 15 SP1	Fixed
SUSE Linux Enterprise Server for SAP Applications 15 SP2	Fixed
SUSE Linux Enterprise Server for SAP Applications 15 SP3	Fixed
SUSE Linux Enterprise Server for SAP Applications 15 SP4	Fixed
SUSE Linux Enterprise Server for SAP Applications 15 SP5	Fixed
SUSE Linux Enterprise Software Development Kit 11 SP3	Fixed
SUSE Linux Enterprise Software Development Kit 11 SP4	Fixed
SUSE Manager Proxy 4.0	Fixed
SUSE Manager Proxy 4.1	Fixed
SUSE Manager Proxy 4.2	Fixed
SUSE Manager Retail Branch Server 4.0	Fixed
SUSE Manager Retail Branch Server 4.1	Fixed
SUSE Manager Retail Branch Server 4.2	Fixed
SUSE Manager Server 4.0	Fixed
SUSE Manager Server 4.1	Fixed
SUSE Manager Server 4.2	Fixed
SUSE OpenStack Cloud 7	Fixed
SUSE OpenStack Cloud 8	Fixed
SUSE OpenStack Cloud 9	Fixed
SUSE OpenStack Cloud Crowbar 8	Fixed
SUSE OpenStack Cloud Crowbar 9	Fixed
openSUSE Leap 15.3	Fixed
openSUSE Leap 15.4	Fixed
openSUSE Leap 15.5	Fixed
openSUSE Leap Micro 5.2	Fixed
openSUSE Leap Micro 5.3	Fixed
openSUSE Leap Micro 5.4	Fixed
openSUSE Leap Micro 5.5	Fixed
suse/sle-micro/5.0/toolbox suse/sles/15.2/virt-launcher:0.38.1	Fixed
bci/spack:0.23 containers/lmcache-lmstack-router:0 containers/open-webui-pipelines:0 private-registry/harbor-nginx private-registry/harbor-portal suse/manager/5.0/x86_64/server suse/manager/5.0/x86_64/server-migration-14-16 suse/mariadb:10.11 suse/multi-linux-manager/5.1/x86_64/server suse/multi-linux-manager/5.1/x86_64/server-migration-14-16 suse/multi-linux-manager/5.2/x86_64/server suse/multi-linux-manager/5.2/x86_64/server-database-migration suse/multi-linux-manager/5.2/x86_64/server-migration-14-16 suse/sle-micro/5.1/toolbox suse/sle-micro/5.2/toolbox suse/sle-micro/5.3/toolbox suse/sle-micro/5.4/toolbox suse/sle-micro/5.5 suse/sle-micro/5.5/toolbox suse/sle-micro/rt-5.5	Fixed
bci/dotnet-aspnet:5.0 bci/dotnet-runtime:5.0 bci/dotnet-sdk:5.0 ses/7.1/ceph/haproxy ses/7.1/ceph/keepalived suse/kiosk/firefox-esr:esr suse/kiosk/xorg:21 suse/nginx suse/pcp suse/pcp:5 suse/pcp:6 suse/registry suse/registry:2.8 suse/rmt-mariadb suse/rmt-nginx suse/sles/15.3/libguestfs-tools:0.45.0 suse/sles/15.3/virt-launcher:0.45.0 suse/sles/15.4/libguestfs-tools:0.49.0 suse/sles/15.4/virt-launcher:0.49.0 suse/sles/15.6/libguestfs-tools:1.1.1 suse/sles/15.7/libguestfs-tools:1.5.0	Fixed

CVE-2025-40909

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

Affected ProductsAI

RemediationAI

Same weakness CWE-426 – Untrusted Search Path

Same technique Information Disclosure

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code