CVE-2025-46810

A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of openSUSE Tumbleweed traefik2 allows the traefik user to escalate to root. This issue affects Tumbleweed: from ? before 2.11.29.

Score

CVSS 4.0 8.5 High

Status

Deferred - meissner@suse.de

Published

2025-09-02

Last modified

2026-02-26

Weaknesses

CWE-61

Affected products

• Tumbleweed (Opensuse)

References

• https://bugzilla.suse.com/show_bug.cgi?id=1245204