CVE-2025-65807

EUVD-2025-202427
An issue in sd command v1.0.0 and before allows attackers to escalate privileges to root via a crafted command.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.4 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA-ADPADP
8.4 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 5%
Affected Products (NVD)
VendorProductVersion
chmlnsd
𝑥
≤ 1.0.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
rust-sd
bookworm
unimportant
forky
unimportant
sid
unimportant
trixie
unimportant
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
rust-sd
jammy
dne
noble
needs-triage
plucky
ignored
questing
needs-triage
Common Weakness Enumeration
References
http://sd.com
https://gist.github.com/faabbi/827f10e144fdd342e13a3dd838902e83
https://github.com/chmln/sd