CVE-2025-70819

MediumCVSS 6.3

Published: 13/09/2026(UTC)Updated: 22/09/2026(UTC)Translated: 14/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.11%

1th percentile - higher than 1% of all known CVEs

Summary

Zettlab D6 Ultra before 1.7.0 allows mounting /etc/passwd and /etc/shadow in a container via ".." manipulations such as volumes: - ../../../../../../../etc:/h_etc:rw in a compose file.

Risk Assessment

An attacker can gain access to sensitive system files such as /etc/passwd and /etc/shadow, potentially leading to password disclosure and system compromise.

Recommendation

Upgrade Zettlab D6 Ultra to version 1.7.0 or later. Restrict the ability to define volumes with paths escaping the allowed directory in compose files.

Other vulnerabilities in Zettlab D6 Ultra

CVE-2025-70820Low
Zettlab D6 Ultra before 1.7.0 allows absolute path traversal to reach folders other than the personal folder. The vulnerability enables unauthorized access to resources outside the intended scope.

Original NVD description (English source)

Zettlab D6 Ultra before 1.7.0 allows mounting /etc/passwd and /etc/shadow in a container via ".." manipulations such as volumes: - ../../../../../../../etc:/h_etc:rw in a compose file.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS