CVE-2025-23395 HIGH

CVE-2025-23395: Local root exploit via `logfile_reopen()` in screen 5.0.0 with setuid-root bit set

Weakness CWE-271
Published May 26, 2025
Last update May 27, 2025
View on NVD All CVEs

CVSS base score

7.8/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Screen 5.0.0 when it runs with setuid-root privileges does not drop privileges while operating on a user supplied path. This allows unprivileged users to create files in arbitrary locations with `root` ownership, the invoking user's (real) group ownership and file mode 0644. All data written to the Screen PTY will be logged into this file, allowing to escalate to root privileges

Key dates

02Disclosure timeline

May 26, 2025 CVE published
May 27, 2025 Record updated