CVE-2025-66003
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
An External Control of File Name or Path vulnerability in smb4k before version 4.0.5 allows local users to perform a local root exploit via smb4k mounthelper if they can access and control the contents of a Samba share.
Risk Assessment
Risk of local privilege escalation to root, potentially leading to full system compromise.
Recommendation
Update smb4k to version 4.0.5 or later to fix the vulnerability.
Other vulnerabilities in smb4k
See all- CVE-2017-8849High
smb4k before 2.0.1 allows local users to gain root privileges by leveraging failure to verify arguments to the mount helper DBUS service.
- CVE-2025-66002Medium
An improper neutralization of argument delimiters in a command (Argument Injection) vulnerability allows local users to perform arbitrary unmounts via the smb4k mount helper.
Original NVD description (English source)
An External Control of File Name or Path vulnerability in smb4k allowsl ocal users to perform a local root exploit via smb4k mounthelper if they can access and control the contents of a Samba shareThis issue affects smb4k: from ? before 4.0.5.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS