CVE-2025-14946
MediumSummary
A flaw was found in the libnbd library where a malicious actor could exploit a specially crafted URI to convince libnbd to open it. The vulnerability arises from the incorrect interpretation of non-standard hostnames starting with '-o' as arguments to the SSH process.
Risk Assessment
The risk involves potential remote execution of unauthorized SSH commands by an attacker, which could lead to system compromise or data exfiltration.
Recommendation
It is recommended to immediately update the libnbd library to the latest patched version and avoid opening URIs from untrusted sources.
Original NVD description (English source)
A flaw was found in libnbd. A malicious actor could exploit this by convincing libnbd to open a specially crafted Uniform Resource Identifier (URI). This vulnerability arises because non-standard hostnames starting with '-o' are incorrectly interpreted as arguments to the Secure Shell (SSH) process,