CVE-2025-54545CWE-732

CVE-2025-54545

High · published October 30, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
2.0
In the wild
Unconfirmed
What it is

⚡ A restricted user can escape the confines of the CLI sandbox and take control of the system shell — it’s like finding a secret backdoor in a building that only trusted staff should access! 🔥 Think of the CLI sandbox as a secure, locked room in a hotel where only certain guests are allowed. If a determined guest finds a way to break down the door, they could roam freely through the entire hotel, accessing rooms and valuables they shouldn't! This vulnerability is absolutely devastating — an attacker could elevate their privileges and gain full control over the system, potentially leading to data breaches, unauthorized changes, or even system outages. If exploited, it could turn your secure environment into a playground for malicious actions, leaving your whole system at risk!

Put simply

Think of the CLI sandbox as a secure, locked room in a hotel where only certain guests are allowed. If a determined guest finds a way to break down the door, they could roam freely through the entire hotel, accessing rooms and valuables they shouldn't! CVE-2025-54545 allows restricted users to escape from the CLI sandbox to the system shell, effectively bypassing the security measures intended to limit their access. This could enable them to execute arbitrary commands with elevated privileges.

What to do

This vulnerability is absolutely devastating — an attacker could elevate their privileges and gain full control over the system, potentially leading to data breaches, unauthorized changes, or even system outages. If exploited, it could turn your secure environment into a playground for malicious actions, leaving your whole system at risk! To safeguard against this vulnerability, patch affected platforms immediately, and apply any updates provided by the vendor. It’s also wise to review user permissions and limit access to sensitive system areas where possible. 🛡️ You’ve got this! By following these steps, you can tighten your defenses and keep your system secure. 🚀

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00125 · 2.0th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2025-10-30T03:16Z
References (1)
EPSS history
Timeline
  • 29 OCT 22:36Z
    On affected platforms, a restricted user could break out of the CLI sandbox to the system shell and elevate their privileges.
    cvelistv5