Security Advisory

CVE-2025-14946

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-12-19 13:02:38

Last updated 2025-12-22 21:28:33

Assigner redhat

State PUBLISHED

Description

A flaw was found in libnbd. A malicious actor could exploit this by convincing libnbd to open a specially crafted Uniform Resource Identifier (URI). This vulnerability arises because non-standard hostnames starting with -o are incorrectly interpreted as arguments to the Secure Shell (SSH) process, rather than as hostnames. This could lead to arbitrary code execution with the privileges of the user running libnbd.

← Browse all CVEs View on cve.org ↗