What is the CVSS score of CVE-2025-52991?

CVE-2025-52991 has a CVSS 3.1 base score of 3.2 (Low). CVSS vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N. EPSS exploitation probability: 0.0%.

Which versions of Ubuntu are affected by CVE-2025-52991?

CVE-2025-52991 is a low-severity vulnerability involving incorrect permissions (CVSS 3.2).. A patch is available.

How to fix or mitigate CVE-2025-52991?

During next maintenance window: Apply vendor patches when convenient. Verify incorrect permissions controls are in place.

Ubuntu CVE-2025-52991

EUVD-2025-19381 LOW

Incorrect Default Permissions (CWE-276)

2025-06-27 cve@mitre.org

Privilege Escalation Debian Ubuntu

3.2

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

3.2 LOW

AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N

Ubuntu

MEDIUM

qualitative

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

None

Integrity

Low

Availability

None

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

EUVD ID Assigned

Mar 16, 2026 - 00:16 euvd

EUVD-2025-19381

Analysis Generated

Mar 16, 2026 - 00:16 vuln.today

CVE Published

Jun 27, 2025 - 14:15 nvd

LOW 3.2

DescriptionCVE.org

The Nix, Lix, and Guix package managers default to using temporary build directories in a world-readable and world-writable location. This allows standard users to deceive the package manager into using directories with pre-existing content, potentially leading to unauthorized actions or data manipulation. This affects Nix before 2.24.15, 2.26.4, 2.28.4, and 2.29.1; Lix before 2.91.2, 2.92.2, and 2.93.1; and Guix before 1.4.0-38.0e79d5b.

Analysis

Technical ContextAI

Privilege escalation allows a low-privileged user or process to gain elevated permissions beyond what was originally authorized. This vulnerability is classified as Incorrect Default Permissions (CWE-276).

RemediationAI

Apply the principle of least privilege. Keep systems patched. Monitor for suspicious privilege changes. Use mandatory access controls (SELinux, AppArmor).

Same weakness CWE-276 – Incorrect Default Permissions

View all

CVE-2013-0632 CRITICAL POC

9.8

CVE-2017-11610 HIGH POC

8.8

CVE-2022-22948 MEDIUM POC

6.5

CVE-2017-8625 HIGH POC

8.8

CVE-2016-5425 HIGH POC

7.8

CVE-2024-55215 CRITICAL POC

9.8

CVE-2024-57604 CRITICAL POC

9.8

CVE-2024-28056 CRITICAL POC

9.8

Same technique Privilege Escalation

View all

CVE-2024-0012 CRITICAL POC

9.3

CVE-2025-47812 CRITICAL POC

10.0

CVE-2013-0422 CRITICAL POC

9.8

CVE-2013-0632 CRITICAL POC

9.8

CVE-2024-9474 MEDIUM POC

6.9

CVE-2017-5689 CRITICAL POC

9.8

CVE-2021-20021 CRITICAL POC

9.8

CVE-2017-12635 CRITICAL POC

9.8

Vendor StatusVendor

Ubuntu

Priority: Medium

guix

Release	Status	Version
jammy	needs-triage	-
noble	needs-triage	-
upstream	needs-triage	-
oracular	ignored	end of life, was needs-triage
plucky	ignored	end of life, was needs-triage
questing	DNE	-

Debian

Bug #1108318

guix

Release	Status	Fixed Version	Urgency
bullseye	fixed	(unfixed)	end-of-life
bullseye (security)	vulnerable	1.2.0-4+deb11u3	-
sid	vulnerable	1.4.0-9	-
(unstable)	fixed	(unfixed)	-

CVE-2025-52991 vulnerability details – vuln.today

Back

Ubuntu CVE-2025-52991

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

Analysis

Technical ContextAI

RemediationAI

Same weakness CWE-276 – Incorrect Default Permissions

Same technique Privilege Escalation

Vendor StatusVendor

Ubuntu

Debian

Share

External POC / Exploit Code