CVE-2025-66003CWE-73

CVE-2025-66003

published January 8, 2026

CVSS
7.3
EPSS
0%
Percentile
1.8
In the wild
Unconfirmed
What it is

An External Control of File Name or Path vulnerability in smb4k allowsl ocal users to perform a local root exploit via smb4k mounthelper if they can access and control the contents of a Samba shareThis issue affects smb4k: from ? before 4.0.5.

The record
Technical detail
CVSS
7.3 · NONE
CVSS v4.0
Not supplied
EPSS
0.00121 · 1.8th percentile
Weakness
CWE-73 · External Control of File Name or Path
Published
2026-01-08T20:15Z
References (2)
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-66003 · [email protected]https://security.opensuse.org/2025/12/10/smb4k-major-issues-in-kauth-helper.html · [email protected]
EPSS history
Timeline
  • 08 JAN 14:58Z
    Local users can perform a local root exploit via smb4k mounthelper
    cvelistv5