https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 22:26:00 +0000 https://cve.radiocsirt.org/vuln/cve-2025-27591 <p><strong>Affected:</strong> Meta Platforms, Inc below</p> <p>A privilege escalation vulnerability existed in the Below service prior to v0.9.0 due to the creation of a world-writable directory at /var/log/below. This could have allowed local unprivileged users to escalate to root privileges through symlink attacks that manipulate files such as /etc/shadow.</p> <p><strong>Affected:</strong> Meta Platforms, Inc below</p> <p>A privilege escalation vulnerability existed in the Below service prior to v0.9.0 due to the creation of a world-writable directory at /var/log/below. This could have allowed local unprivileged users to escalate to root privileges through symlink attacks that manipulate files such as /etc/shadow.</p> https://cve.radiocsirt.org/vuln/cve-2025-27591 https://cve.radiocsirt.org/vuln/ghsa-9mc5-7qhg-fp3w <p><strong>Affected:</strong> crates.io: below</p> <p>### Impact A privilege escalation vulnerability existed in the Below service prior to v0.9.0 due to the creation of a world-writable directory at /var/log/below. This could have allowed local unprivileged users to escalate to root privileges through symlink attacks that manipulate files such as /etc/shadow.</p> <p>### Patches https://github.com/facebookincubator/below/commit/10e73a21d67baa2cd613ee92ce999cda145e1a83</p> <p>This is included in version 0.9.0</p> <p>### Workarounds Change the permission on `/var/log/below` manually</p> <p>### References https://www.facebook.com/security/advisories/cve-2025-27591 https://www.cve.org/CVERecord?id=CVE-2025-27591</p> <p><strong>Affected:</strong> crates.io: below</p> <p>### Impact A privilege escalation vulnerability existed in the Below service prior to v0.9.0 due to the creation of a world-writable directory at /var/log/below. This could have allowed local unprivileged users to escalate to root privileges through symlink attacks that manipulate files such as /etc/shadow.</p> <p>### Patches https://github.com/facebookincubator/below/commit/10e73a21d67baa2cd613ee92ce999cda145e1a83</p> <p>This is included in version 0.9.0</p> <p>### Workarounds Change the permission on `/var/log/below` manually</p> <p>### References https://www.facebook.com/security/advisories/cve-2025-27591 https://www.cve.org/CVERecord?id=CVE-2025-27591</p> https://cve.radiocsirt.org/vuln/ghsa-9mc5-7qhg-fp3w