VULNERABILITY INTELLIGENCE

CVE-2025-53881

CVSS score6.9 MEDIUM

EPSS probability0.17%

CISA KEVNot currently listed

Published2025-10-02

Last modified2026-10-12

Description

A UNIX Symbolic Link (Symlink) Following vulnerability in logrotate config in the exim package allowed privilege escalation from mail user/group to root.This issue affects Tumbleweed: from ? before 4.98.2-lp156.248.1.