CVE-2025-65807

An issue in sd command v1.0.0 and before allows attackers to escalate privileges to root via a crafted command

High · published December 10, 2025

CVSS v3.1
8.4
EPSS
0%
Percentile
9.2
In the wild
Unconfirmed
What it is

⚡ A cleverly crafted command is all it takes to escalate privileges to root in sd command v1.0.0 and earlier! This vulnerability is no small matter! 🔥 Think of it like having a seemingly harmless button in an office that, when pushed, gives you access to the entire building — the front desk may let you in, but you’re now in the executive suite! If an attacker uses this exploit, they can gain root access, allowing them to execute any command they please, potentially leading to data theft, damage, or system takeover. This could be absolutely devastating for your systems and data integrity.

Put simply

Think of it like having a seemingly harmless button in an office that, when pushed, gives you access to the entire building — the front desk may let you in, but you’re now in the executive suite! This vulnerability in sd command allows attackers to escalate their privileges to root by sending a specially crafted command that the system blindly executes, bypassing normal security checks.

What to do

If an attacker uses this exploit, they can gain root access, allowing them to execute any command they please, potentially leading to data theft, damage, or system takeover. This could be absolutely devastating for your systems and data integrity. Update sd command to version 1.0.1 or later immediately. Implement stricter command validation to prevent unauthorized privilege escalation. Always review command logs for suspicious activities to catch any attempts early. You’ve got this! With these steps, you’ll have your systems secured in no time! 🛡️

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00199 · 9.2th percentile
Published
2025-12-10T00:00Z
EPSS history
Timeline
  • 10 DEC 00:00Z
    An issue in sd command v1.0.0 and before allows attackers to escalate privileges to root via a crafted command
    cvelistv5