What is the CVSS score of CVE-2025-53391?

CVE-2025-53391 has a CVSS 3.1 base score of 9.3 (Critical). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Ubuntu are affected by CVE-2025-53391?

CVE-2025-53391 presents critical security risk, a incorrect authorization vulnerability rated CVSS 9.3.. A patch is available.

How to fix or mitigate CVE-2025-53391?

Within 24 hours: Identify all affected systems and apply vendor patches immediately. Monitor vendor channels for patch availability.

Ubuntu CVE-2025-53391

EUVD-2025-19461 CRITICAL

Incorrect Authorization (CWE-863)

2025-06-28 cve@mitre.org

Authentication Bypass Debian Ubuntu

9.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

9.3 CRITICAL

AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Ubuntu

HIGH

qualitative

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

EUVD ID Assigned

Mar 16, 2026 - 01:05 euvd

EUVD-2025-19461

Analysis Generated

Mar 16, 2026 - 01:05 vuln.today

CVE Published

Jun 28, 2025 - 22:15 nvd

CRITICAL 9.3

DescriptionCVE.org

The Debian zuluPolkit/CMakeLists.txt file for zuluCrypt through the zulucrypt_6.2.0-1 package has insecure PolicyKit allow_any/allow_inactive/allow_active settings that allow a local user to escalate their privileges to root.

AnalysisAI

CVE-2025-53391 is a security vulnerability (CVSS 9.3) that allows a local user. Critical severity with potential for significant impact on affected systems.

Technical ContextAI

CWE-863 (Incorrect Authorization). CVSS 9.3 indicates critical severity with likely remote exploitation vector.

RemediationAI

Monitor vendor channels for patch availability.

Same weakness CWE-863 – Incorrect Authorization

View all

CVE-2025-54253 CRITICAL POC

10.0

CVE-2025-24200 MEDIUM

6.1

CVE-2026-42016 HIGH POC

8.8

CVE-2023-21715 HIGH

7.3

CVE-2025-21480 HIGH

8.6

CVE-2025-21479 HIGH

8.6

CVE-2025-32462 HIGH POC

8.8

CVE-2017-4915 HIGH POC

7.8

Same technique Authentication Bypass

View all

CVE-2023-22515 CRITICAL POC

9.8

CVE-2012-4681 CRITICAL POC

9.8

CVE-2013-2465 CRITICAL POC

9.8

CVE-2011-3544 CRITICAL POC

9.8

CVE-2022-40684 CRITICAL POC

9.8

CVE-2025-61882 CRITICAL POC

9.8

CVE-2024-0012 CRITICAL POC

9.3

CVE-2023-46805 HIGH POC

8.2

Vendor StatusVendor

Ubuntu

Priority: High

zulucrypt

Release	Status	Version
xenial	needs-triage	-
bionic	needs-triage	-
focal	needs-triage	-
jammy	needs-triage	-
noble	needs-triage	-
upstream	needs-triage	-
plucky	ignored	end of life, was needs-triage
oracular	ignored	end of life, was needs-triage
questing	needs-triage	-

Debian

Bug #1108288

zulucrypt

Release	Status	Fixed Version	Urgency
bullseye	vulnerable	5.7.1-2	-
bookworm	vulnerable	6.2.0-1	-
(unstable)	fixed	(unfixed)	-

CVE-2025-53391 vulnerability details – vuln.today

Back

Ubuntu CVE-2025-53391

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

Same weakness CWE-863 – Incorrect Authorization

Same technique Authentication Bypass

Vendor StatusVendor

Ubuntu

Debian

Share

External POC / Exploit Code