VULNERABILITY INTELLIGENCE
CVE-2025-66003
EPSS probability0.12%
CISA KEVNot currently listed
Published2026-01-08
Last modified2026-10-11
Description
An External Control of File Name or Path vulnerability in smb4k allowsl ocal users to perform a local root exploit via smb4k mounthelper if they can access and control the contents of a Samba shareThis issue affects smb4k: from ? before 4.0.5.
Weakness classification
- meissner@suse.de: CWE-73