What is the CVSS score of EUVD-2025-32655?

EUVD-2025-32655 has a CVSS 4.0 base score of 6.9 (Medium). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N. EPSS exploitation probability: 0.0%.

Which versions of Ubuntu are affected by EUVD-2025-32655?

CVE-2025-53881 presents notable security risk rated CVSS 6.9. Exploitation could compromise the security of affected deployments.. A patch is available.

How to fix or mitigate EUVD-2025-32655?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Ubuntu EUVD-2025-32655

| CVE-2025-53881 MEDIUM

UNIX Symbolic Link (Symlink) Following (CWE-61)

2025-10-02 meissner@suse.de

Privilege Escalation Ubuntu Debian Suse

6.9

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

6.9 MEDIUM

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N

Ubuntu

MEDIUM

qualitative

SUSE

MEDIUM

qualitative

Primary rating from NVD.

CVSS VectorNVD

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

EUVD ID Assigned

Mar 13, 2026 - 19:12 euvd

EUVD-2025-32655

Analysis Generated

Mar 13, 2026 - 19:12 vuln.today

CVE Published

Oct 02, 2025 - 14:15 nvd

MEDIUM 6.9

DescriptionCVE.org

A UNIX Symbolic Link (Symlink) Following vulnerability in logrotate config in the exim package allowed privilege escalation from mail user/group to root.This issue affects Tumbleweed: from ? before 4.98.2-lp156.248.1.

Analysis

Technical ContextAI

Privilege escalation allows a low-privileged user or process to gain elevated permissions beyond what was originally authorized.

RemediationAI

Apply the principle of least privilege. Keep systems patched. Monitor for suspicious privilege changes. Use mandatory access controls (SELinux, AppArmor).

Same weakness CWE-61 – UNIX Symbolic Link (Symlink) Following

View all

CVE-2026-54420 HIGH POC

8.5

CVE-2026-27976 HIGH POC

8.8

CVE-2024-22014 HIGH POC

8.8

CVE-2025-52565 HIGH POC

8.4

CVE-2026-41326 HIGH POC

8.2

CVE-2025-1079 HIGH POC

7.8

CVE-2021-25321 HIGH POC

7.8

CVE-2021-25322 HIGH POC

7.8

Same technique Privilege Escalation

View all

CVE-2025-47812 CRITICAL POC

10.0

CVE-2013-0422 CRITICAL POC

9.8

CVE-2013-0632 CRITICAL POC

9.8

CVE-2017-5689 CRITICAL POC

9.8

CVE-2017-12635 CRITICAL POC

9.8

CVE-2016-10372 CRITICAL POC

9.8

CVE-2014-9583 CRITICAL POC

10.0

CVE-2012-0297 CRITICAL POC

10.0

Vendor StatusVendor

Ubuntu

Priority: Medium

exim4

Release	Status	Version
trusty	not-affected	SUSE specific
xenial	not-affected	SUSE specific
bionic	not-affected	SUSE specific
focal	not-affected	SUSE specific
jammy	not-affected	SUSE specific
noble	not-affected	SUSE specific
plucky	not-affected	SUSE specific
upstream	not-affected	SUSE specific

Debian

exim4

Release	Status	Fixed Version	Urgency
bullseye	fixed	4.94.2-7+deb11u3	-
bullseye (security)	fixed	4.94.2-7+deb11u4	-
bookworm, bookworm (security)	fixed	4.96-15+deb12u7	-
trixie	fixed	4.98.2-1	-
forky, sid	fixed	4.99.1-1	-
(unstable)	not-affected	-	-

SUSE

Severity: Medium

Product	Status
SUSE Package Hub 15 SP6	Fixed
openSUSE Leap 15.6	Fixed
openSUSE Leap 16.0	Fixed
openSUSE Tumbleweed	Fixed
SUSE Package Hub 15 SP6	Fixed

EUVD-2025-32655 vulnerability details – vuln.today

Back

Ubuntu EUVD-2025-32655

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

Analysis

Technical ContextAI

RemediationAI

Same weakness CWE-61 – UNIX Symbolic Link (Symlink) Following

Same technique Privilege Escalation

Vendor StatusVendor

Ubuntu

Debian

SUSE

Share

External POC / Exploit Code