CVE-2025-5689

A flaw was found in the temporary user record that authd uses in the pre-auth NSS. As a result, a user login for the first time will be considered to be part of the root group in the context of that SSH session.

Score

CVSS 3.1 8.5 High

Status

Analyzed - security@ubuntu.com

Published

2025-06-16

Last modified

2025-06-17

Weaknesses

CWE-269

Affected products

• Authd (Canonical)

References

• https://github.com/ubuntu/authd/security/advisories/GHSA-g8qw-mgjx-rwjr