smb4k vulnerabilities

3 known CVE vulnerabilities in smb4k, translated and rated.

CVE-2017-8849High
smb4k before 2.0.1 allows local users to gain root privileges by leveraging failure to verify arguments to the mount helper DBUS service.
CVE-2025-66003High
An External Control of File Name or Path vulnerability in smb4k before version 4.0.5 allows local users to perform a local root exploit via smb4k mounthelper if they can access and control the contents of a Samba share.
CVE-2025-66002Medium
An improper neutralization of argument delimiters in a command (Argument Injection) vulnerability allows local users to perform arbitrary unmounts via the smb4k mount helper.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS