Description

Ceph is a distributed object, block, and file storage platform. In versions 17.2.7, 18.2.1 through 18.2.4, and 19.0.0 through 19.2.2, an unprivileged user can escalate to root privileges in a ceph-fuse mounted CephFS by chmod 777 a directory owned by root to gain access. The result of this is that a user could read, write and execute to any directory owned by root as long as they chmod 777 it. This impacts confidentiality, integrity, and availability. It is patched in versions 17.2.8, 18.2.5, and 19.2.3.

INFO

Published Date :

2025-06-26T20:21:05.594Z

Last Modified :

2025-11-03T18:13:06.474Z

Source :

GitHub_M
AFFECTED PRODUCTS

The following products are affected by CVE-2025-52555 vulnerability.

Vendors Products
Ceph
  • Ceph
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-52555.

URL Resource
https://github.com/ceph/ceph/pull/60314 cve-icon cve-icon cve-icon
https://github.com/ceph/ceph/security/advisories/GHSA-89hm-qq33-2fjm cve-icon cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2025/09/msg00025.html cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-52555 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-52555 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact