CVE-2025-0620
A flaw was found in Samba. The smbd service daemon does not pick up group membership changes when re-authenticating an expired SMB session. This issue can expose file shares until clients disconnect and then connect again.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 4.9
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
- EPSS probability
- 0.75%
- CWE
- CWE-552
- Published
- 2025-06-06
- Last modified
- 2026-08-31
Weakness type
Related vulnerabilities
- CVE-2023-50164 — Apache Struts: File upload component had a directory traversal vulnerability
- CVE-2024-6911 — Unauthenticated Local File Inclusion
- CVE-2024-6209 — unauthorized file access
- CVE-2025-34110 — ColoradoFTP Server <= 1.3 Build 8 Path Traversal Information Disclosure
- CVE-2025-68109 — ChurchCRM vulnerable to RCE with database restore functionality
- CVE-2023-2766 — Weaver OA jx2_config.ini file access
- CVE-2009-10005 — ContentKeeper Web Appliance < 125.10 Arbitrary File Access via mimencode
- CVE-2023-48710 — iTop limit pages/exec.php script to PHP files