CVE-2025-14282: Dropbear: privilege escalation via unix domain socket forwardings
A flaw was found in Dropbear. When running in multi-user mode and authenticating users, the dropbear ssh server does the socket forwardings requested by the remote client as root, only switching to the logged-in user upon spawning a shell or performing some operations like reading the user's files. With the recent ability of also using unix domain sockets as the forwarding destination any user able to log in via ssh can connect to any unix socket with the root's credentials, bypassing both file system restrictions and any SOPEERCRED / SOPASSCRED checks performed by the peer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14282?
CVE-2025-14282 is classified as a high severity vulnerability due to the potential for privilege escalation.
How do I fix CVE-2025-14282?
To fix CVE-2025-14282, update Dropbear to a version later than 2025.89 where the vulnerability is patched.
What is the impact of CVE-2025-14282?
The impact of CVE-2025-14282 is that it allows a remote user to execute commands with elevated privileges through UNIX domain socket forwardings.
Which versions of Dropbear are affected by CVE-2025-14282?
Dropbear versions up to and including 2025.89 are affected by CVE-2025-14282.
Is CVE-2025-14282 specific to any operating system?
CVE-2025-14282 affects Dropbear running in multi-user mode on any operating system that supports this SSH server.