CVE-2025-5689

Published June 16th, 2025

View on NVD ↗

CVSS v3

8.5

HIGH

CVSS v2

N/A

Affected

PROJECT

Description

A flaw was found in the temporary user record that authd uses in the pre-auth NSS. As a result, a user login for the first time will be considered to be part of the root group in the context of that SSH session.

canonical/authd

Authentication service for external identity providers

GitHub

298