CVE-2025-61557

nixseparatedebuginfod before v0.4.1 is vulnerable to Directory Traversal

High · published December 30, 2025

CVSS v3.1
7.5
EPSS
1%
Percentile
53.7
In the wild
Unconfirmed
What it is

⚡ A sneaky directory traversal vulnerability lurks in nixseparatedebuginfod versions before 0.4.1! An attacker could easily step outside the intended directory and access sensitive files. 🔥 Think of it like a restaurant that mistakenly allows kitchen staff to wander into the storage room without checking their ID, leading to potential theft of secret recipes! If exploited, this flaw could allow attackers to read sensitive files on the server, exposing critical data and creating a risk of further attacks. The consequences could be absolutely devastating, putting your system's integrity on the line.

Put simply

Think of it like a restaurant that mistakenly allows kitchen staff to wander into the storage room without checking their ID, leading to potential theft of secret recipes! The vulnerability arises from improper handling of file paths, enabling malicious actors to traverse directories using crafted input, reaching files outside the intended directories.

What to do

If exploited, this flaw could allow attackers to read sensitive files on the server, exposing critical data and creating a risk of further attacks. The consequences could be absolutely devastating, putting your system's integrity on the line. To protect your systems, upgrade nixseparatedebuginfod to version 0.4.1 or later immediately. Additionally, review your file handling practices to ensure proper input validation and directory restrictions are in place. You've got this! Follow these steps to tighten up your security and keep your data safe. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00729 · 53.7th percentile
Published
2025-12-30T00:00Z
EPSS history
Timeline
  • 30 DEC 00:00Z
    nixseparatedebuginfod before v0.4.1 is vulnerable to Directory Traversal
    cvelistv5