VULNERABILITY INTELLIGENCE

CVE-2025-1131

CVSS score7.8 HIGH
EPSS probability0.22%
CISA KEVNot currently listed
Published2025-09-23
Last modified2026-10-19
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

A local privilege escalation vulnerability exists in the safe_asterisk script included with the Asterisk toolkit package. When Asterisk is started via this script (common in SysV init or FreePBX environments), it sources all .sh files located in /etc/asterisk/startup.d/ as root, without validating ownership or permissions. Non-root users with legitimate write access to /etc/asterisk can exploit this behaviour by placing malicious scripts in the startup.d directory, which will then execute with root privileges upon service restart.

Weakness classification

  • b7efe717-a805-47cf-8e9a-921fca0ce0ce: CWE-427

Primary references