CVE-2025-12801 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assig…
Medium CVSS: 6.5

CVE-2025-12801

A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the
privileges assigned to it in the /etc/exports file at mount time. In particular, it allows the client to access any subdirectory or subtree of an exported directory, regardless of the set file permissions, and regardless of any 'root_squash' or 'all_squash' attributes that would normally be expected to apply to that client.
Vendor
Redhat
Product
Openshift Container Platform
CWE
CWE-279
Yayın Tarihi
2026-03-04 16:16:23
Güncelleme
2026-04-02 15:16:22
Source Identifier
secalert@redhat.com
KEV Date Added
-

Kategoriler

CWE-279 Openshift Container Platform MEDIUM Redhat 2026

Referanslar

https://access.redhat.com/errata/RHSA-2026:3938 https://access.redhat.com/errata/RHSA-2026:3939 https://access.redhat.com/errata/RHSA-2026:3940 https://access.redhat.com/errata/RHSA-2026:3941 https://access.redhat.com/errata/RHSA-2026:3942 https://access.redhat.com/errata/RHSA-2026:5127 https://access.redhat.com/errata/RHSA-2026:5606 https://access.redhat.com/errata/RHSA-2026:5867 https://access.redhat.com/errata/RHSA-2026:5873 https://access.redhat.com/errata/RHSA-2026:5877 https://access.redhat.com/security/cve/CVE-2025-12801 https://bugzilla.redhat.com/show_bug.cgi?id=2413081