CVE-2025-27591

MEDIUM EPSS 27.9%
Published Mar 11, 20251y ago · Modified Jun 17, 20261w ago
6.8 CVSS 3.1
Medium
Find Similar
Published Mar 11, 2025 1y ago
Last Modified Jun 17, 2026 1w ago

Description

A privilege escalation vulnerability existed in the Below service prior to v0.9.0 due to the creation of a world-writable directory at /var/log/below. This could have allowed local unprivileged users to escalate to root privileges through symlink attacks that manipulate files such as /etc/shadow.

CVSS Details

Base Score
6.8
Exploitability
2.5
Impact
4.2
Vector string
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
Attack Vector Local
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality Low
Integrity High
Availability None

Threat Intelligence

EPSS Exploit Probability
27.9% percentile
Exploit & Patch Status
Public Exploit Known
Patch Available

Weaknesses 1

CWE-732

Affected Products 1

VendorProductVersionRange
facebookbelow* <0.9.0

References 3

  • openwall.com http://www.openwall.com/lists/oss-security/2025/03/12/1
    ExploitMailing List
  • github.com https://github.com/facebookincubator/below/commit/da9382e6e3e332fd2c3195e22f34977f83f0f1f3
    Patch
  • facebook.com https://www.facebook.com/security/advisories/cve-2025-27591
    PatchVendor Advisory

Remediation

  • github.com https://github.com/facebookincubator/below/commit/da9382e6e3e332fd2c3195e22f34977f83f0f1f3
    Patch
  • facebook.com https://www.facebook.com/security/advisories/cve-2025-27591
    PatchVendor Advisory