What is the CVSS score of CVE-2025-5981?

CVE-2025-5981 has a CVSS 3.1 base score of 6.5 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N. EPSS exploitation probability: 0.1%.

Which versions of Osv Scalibr are affected by CVE-2025-5981?

CVE-2025-5981 presents notable security risk, a DLL hijacking vulnerability rated CVSS 6.5. Exploitation could compromise the security of affected deployments.. A patch is available.

How to fix or mitigate CVE-2025-5981?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Vendor patch is available.

Osv Scalibr CVE-2025-5981

EUVD-2025-18630 MEDIUM

Uncontrolled Search Path Element (CWE-427)

2025-06-18 cve-coordination@google.com

GHSA-2hcm-q3f4-fjgw

Path Traversal Osv Scalibr Suse

6.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.5 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

SUSE

MEDIUM

qualitative

Primary rating from NVD.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

Lifecycle Timeline

EUVD ID Assigned

Mar 14, 2026 - 22:49 euvd

EUVD-2025-18630

Analysis Generated

Mar 14, 2026 - 22:49 vuln.today

Patch released

Mar 14, 2026 - 22:49 nvd

Patch available

CVE Published

Jun 18, 2025 - 09:15 nvd

MEDIUM 6.5

DescriptionCVE.org

Arbitrary file write as the OSV-SCALIBR user on the host system via a path traversal vulnerability when using OSV-SCALIBR's unpack() function for container images. Particularly, when using the CLI flag --remote-image on untrusted container images.

Analysis

Technical ContextAI

Path traversal allows an attacker to access files outside the intended directory by manipulating file paths with sequences like '../'. This vulnerability is classified as Uncontrolled Search Path Element (CWE-427).

RemediationAI

A vendor patch is available — apply it immediately. Validate and sanitize file path inputs. Use a whitelist of allowed files or directories. Implement chroot jails or containerization.

Same weakness CWE-427 – Uncontrolled Search Path Element

View all

CVE-2017-6517 CRITICAL POC

9.8

CVE-2020-27955 CRITICAL POC

9.8

CVE-2024-48990 HIGH POC

7.8

CVE-2020-3433 HIGH POC

7.8

CVE-2022-2334 HIGH POC

7.2

CVE-2024-23054 CRITICAL POC

9.8

CVE-2023-31543 CRITICAL POC

9.8

CVE-2019-7653 CRITICAL POC

9.8

Same technique Path Traversal

View all

CVE-2025-64446 CRITICAL POC

9.8

CVE-2015-0016 HIGH POC

7.8

CVE-2016-0752 HIGH POC

7.5

CVE-2024-13159 CRITICAL POC

9.8

CVE-2024-13160 CRITICAL POC

9.8

CVE-2024-13161 CRITICAL POC

9.8

CVE-2014-0780 CRITICAL POC

9.8

CVE-2024-48248 HIGH POC

8.6

Vendor StatusVendor

SUSE

Severity: Medium

Product	Status
SUSE Linux Enterprise Server 16.0	Fixed
openSUSE Tumbleweed	Fixed
SUSE Linux Enterprise Server 16.0	Fixed
SUSE Linux Enterprise Server 16.1	Fixed
SUSE Linux Enterprise Server for SAP applications 16.0	Fixed

CVE-2025-5981 vulnerability details – vuln.today

Back

Osv Scalibr CVE-2025-5981

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

Analysis

Technical ContextAI

RemediationAI

Same weakness CWE-427 – Uncontrolled Search Path Element

Same technique Path Traversal

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code