CVE-2025-53881CWE-61

CVE-2025-53881

published October 2, 2025

CVSS

6.9

EPSS

Percentile

6.2

In the wild

Unconfirmed

What it is

A UNIX Symbolic Link (Symlink) Following vulnerability in logrotate config in the exim package allowed privilege escalation from mail user/group to root.This issue affects Tumbleweed: from ? before 4.98.2-lp156.248.1.

The record

Technical detail

CVSS: 6.9 · NONE
CVSS v4.0: Not supplied
EPSS: 0.00172 · 6.2th percentile
Weakness: CWE-61 · UNIX Symbolic Link (Symlink) Following
Published: 2025-10-02T18:15Z

References (1)

https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-53881 · [email protected]

EPSS history

Timeline

02 OCT 13:51Z
SUSE-specific logrotate configuration allows escalation from mail user/group to root
cvelistv5