CVE-2025-53391: Critical severity Debian zuluCrypt vulnerability
The Debian zuluPolkit/CMakeLists.txt file for zuluCrypt through the zulucrypt6.2.0-1 package has insecure PolicyKit allowany/allowinactive/allowactive settings that allow a local user to escalate their privileges to root.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-53391?
CVE-2025-53391 is classified as a high severity vulnerability due to its potential for local privilege escalation.
How do I fix CVE-2025-53391?
To fix CVE-2025-53391, update zuluCrypt to the latest version that contains the security patches addressing the insecure PolicyKit settings.
What impact does CVE-2025-53391 have on my system?
CVE-2025-53391 allows local users to escalate their privileges to root, potentially compromising the entire system.
Is CVE-2025-53391 present in all versions of zuluCrypt?
CVE-2025-53391 affects zuluCrypt version 6.2.0-1 and may be present in any related versions that do not address the PolicyKit configuration.
Who is affected by CVE-2025-53391?
Users of Debian zuluCrypt who have the vulnerable version installed are directly affected by CVE-2025-53391.