CVE Catalog

CVE-2025-52936

CriticalCVSS 9.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.16%

6th percentile - higher than 6% of all known CVEs

Summary

Improper Link Resolution Before File Access vulnerability in sslh before version 2.2.2 allows an attacker to follow symbolic links.

Risk Assessment

An attacker may gain unauthorized access to files or modify them, leading to data confidentiality and integrity breaches.

Recommendation

Immediately update sslh to version 2.2.2 or later.

Original NVD description (English source)

Improper Link Resolution Before File Access ('Link Following') vulnerability in yrutschle sslh.This issue affects sslh: before 2.2.2.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS