Skip to content
fr Sign in
8.5 High

CVE-2025-5689 A flaw was found in the temporary user record that authd uses in the pre-auth NSS

Description

A flaw was found in the temporary user record that authd uses in the pre-auth NSS. As a result, a user login for the first time will be considered to be part of the root group in the context of that SSH session.

Affected products and versions

Product Affected versions Fixed in
authd 0.0 0.0.0 → 0.5.4 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of authd

The 3 CVEs of authd →
CVE-2026-102631 In authd before 0.7.1, the user identity matching in UpdateUser (internal/users/manager.go) resolves an incoming login… 5.9 Medium CVE-2026-6970 authd prior to version 0.6.4 contains a logic error in primary group ID assignment that can lead to local privilege… 7.3 High
Track this CVE