CVE-2025-46803CWE-276

Screen creates by default world-writable PTYs

Medium · published May 26, 2025

CVSS v4.0
5.1
EPSS
0%
Percentile
11.9
In the wild
Unconfirmed
What it is

The default mode of pseudo terminals (PTYs) allocated by Screen was changed from 0620 to 0622, thereby allowing anyone to write to any Screen PTYs in the system.

The record
Technical detail
CVSS v4.0
5.1 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS
0.00220 · 11.9th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2025-05-26T15:06Z
EPSS history
Timeline
  • 26 MAY 15:06Z
    Screen creates by default world-writable PTYs
    cvelistv5