CVE-2025-66003

High

Published: 08/01/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

An External Control of File Name or Path vulnerability in smb4k before version 4.0.5 allows local users to perform a local root exploit via smb4k mounthelper if they can access and control the contents of a Samba share.

Risk Assessment

Risk of local privilege escalation to root, potentially leading to full system compromise.

Recommendation

Update smb4k to version 4.0.5 or later to fix the vulnerability.

Other vulnerabilities in smb4k

CVE-2017-8849High
smb4k before 2.0.1 allows local users to gain root privileges by leveraging failure to verify arguments to the mount helper DBUS service.

Original NVD description (English source)

An External Control of File Name or Path vulnerability in smb4k allowsl ocal users to perform a local root exploit via smb4k mounthelper if they can access and control the contents of a Samba shareThis issue affects smb4k: from ? before 4.0.5.