CVE-2025-32801

Kea configuration and API directives can be used to load a malicious hook library. Many common configurations run Kea as root, leave the API entry points unsecured by default, and/or place the control sockets in insecure paths. This issue affects Kea versions 2.4.0 through 2.4.1, 2.6.0 through 2.6.2, and 2.7.0 through 2.7.8.

Score

CVSS 3.1 7.8 High

Status

Deferred - security-officer@isc.org

Published

2025-05-28

Last modified

2025-05-28

Weaknesses

CWE-94

Affected products

• Kea (Isc)

References

• https://kb.isc.org/docs/cve-2025-32801