CVE-2025-2903: Privilege Chaining in Delphix
An attacker with knowledge of creating user accounts during VM deployment on Google Cloud Platform (GCP) using the OS Login feature, can login via SSH gaining command-line control of the operating system. This allows an attacker to gain access to sensitive data stored on the VM, install malicious software, and disrupt or disable the functionality of the VM.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-2903?
The severity of CVE-2025-2903 is classified as high due to the potential for an attacker to gain command-line control over the operating system.
How do I fix CVE-2025-2903?
To fix CVE-2025-2903, ensure proper access controls are implemented on user account creation during VM deployment in Google Cloud Platform.
Who is affected by CVE-2025-2903?
CVE-2025-2903 affects users of Google Cloud Platform OS Login and Delphix that utilize VM deployment features.
What does CVE-2025-2903 allow an attacker to do?
CVE-2025-2903 allows an attacker to log in via SSH and gain command-line control of the operating system.
What should I do if I believe I am impacted by CVE-2025-2903?
If you believe you are impacted by CVE-2025-2903, immediately review your VM access configurations and update your access policies accordingly.