CVE-2025-14575
LowCVSS 1.8Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
An Uncontrolled Search Path Element vulnerability in the OpenSSL TLS backend of Qt Network (qtbase) in Qt Framework (Unix) allows a local attacker to load a rogue CA certificate as a trusted system authority via a crafted certificate file placed in the application's working directory.
Risk Assessment
The organization risks compromise of CA trust, potentially enabling man-in-the-middle attacks on TLS communications.
Recommendation
Update Qt Framework to a patched version and implement strict search path controls for certificates.
Original NVD description (English source)
An Uncontrolled Search Path Element vulnerability in the OpenSSL TLS backend of Qt Network (qtbase) in Qt Qt Framework (Unix) allows a local attacker to load a rogue CA certificate as a trusted system authority via a crafted certificate file placed in the application's working directory.