What is the CVSS score of CVE-2025-65807?

CVE-2025-65807 has a CVSS 3.1 base score of 8.4 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of Sd are affected by CVE-2025-65807?

The sd find-and-replace utility (versions 1.0.0 and earlier) contains a local privilege escalation vulnerability enabling unprivileged users to gain root-level access.

Is there a public PoC exploit available for CVE-2025-65807?

Yes, a public proof-of-concept exploit is available for CVE-2025-65807. Prioritise patching immediately. EPSS: 0.2%.

How to fix or mitigate CVE-2025-65807?

24 hours: Inventory all systems running sd and assess operational criticality. 7 days: Either uninstall sd if not essential, or immediately restrict execute permissions to root-only (chmod 700 /usr/local/bin/sd or equivalent). 30 days: Monitor for vendor patch release; identify and test replacement find-and-replace utilities if sd can be permanently removed.

Sd CVE-2025-65807

HIGH

Incorrect Privilege Assignment (CWE-266)

2025-12-10 cve@mitre.org

Privilege Escalation Sd Suse

8.4

CVSS 3.1 · Vendor: mitre

Severity by source

Vendor (mitre) PRIMARY

8.4 HIGH

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SUSE

HIGH

qualitative

Primary rating from Vendor (mitre).

CVSS VectorVendor: mitre

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 05, 2026 - 03:20 vuln.today

DescriptionCVE.org

An issue in sd command v1.0.0 and before allows attackers to escalate privileges to root via a crafted command.

AnalysisAI

Local privilege escalation in the sd command-line find-and-replace utility (versions 1.0.0 and earlier, by chmln) allows a local attacker to gain root privileges through a crafted command. The flaw stems from incorrect privilege assignment (CWE-266) and is exploitable locally with no authentication indicated by the CVSS vector (PR:N), yielding full confidentiality, integrity, and availability compromise. Publicly available exploit code exists (proof-of-concept gist), though the EPSS score is low at 0.18% (8th percentile), and the CVE is not listed in CISA KEV.