Vulnerability · Published Dec 3, 2025 · Assigned by fedora
CVE-2025-12744Abrt: command-injection in abrt leading to local privilege escalation
High 8.8
In plain English
A high-severity OS command injection in abrt. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 53% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.
Official description
A flaw was found in the ABRT daemon’s handling of user-supplied mount information.ABRT copies up to 12 characters from an untrusted input and places them directly into a shell command (docker inspect %s) without proper validation. An unprivileged local user can craft a payload that injects shell metacharacters, causing the root-running ABRT process to execute attacker-controlled commands and ultimately gain full root privileges.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | abrt | 2.10.9-25.el8_10.alma.1 | ALSA-2025:22760 |
| AlmaLinux:8 | abrt-addon-ccpp | 2.10.9-25.el8_10.alma.1 | ALSA-2025:22760 |
| AlmaLinux:8 | abrt-addon-coredump-helper | 2.10.9-25.el8_10.alma.1 | ALSA-2025:22760 |
| AlmaLinux:8 | abrt-addon-kerneloops | 2.10.9-25.el8_10.alma.1 | ALSA-2025:22760 |
| AlmaLinux:8 | abrt-addon-pstoreoops | 2.10.9-25.el8_10.alma.1 | ALSA-2025:22760 |
| AlmaLinux:8 | abrt-addon-vmcore | 2.10.9-25.el8_10.alma.1 | ALSA-2025:22760 |
| AlmaLinux:8 | abrt-addon-xorg | 2.10.9-25.el8_10.alma.1 | ALSA-2025:22760 |
| AlmaLinux:8 | abrt-cli | 2.10.9-25.el8_10.alma.1 | ALSA-2025:22760 |
| AlmaLinux:8 | abrt-cli-ng | 2.10.9-25.el8_10.alma.1 | ALSA-2025:22760 |
| AlmaLinux:8 | abrt-console-notification | 2.10.9-25.el8_10.alma.1 | ALSA-2025:22760 |
| AlmaLinux:8 | abrt-dbus | 2.10.9-25.el8_10.alma.1 | ALSA-2025:22760 |
| AlmaLinux:8 | abrt-desktop | 2.10.9-25.el8_10.alma.1 | ALSA-2025:22760 |
| AlmaLinux:8 | abrt-gui | 2.10.9-25.el8_10.alma.1 | ALSA-2025:22760 |
| AlmaLinux:8 | abrt-gui-libs | 2.10.9-25.el8_10.alma.1 | ALSA-2025:22760 |
| AlmaLinux:8 | abrt-libs | 2.10.9-25.el8_10.alma.1 | ALSA-2025:22760 |
| AlmaLinux:8 | abrt-plugin-machine-id | 2.10.9-25.el8_10.alma.1 | ALSA-2025:22760 |
| AlmaLinux:8 | abrt-plugin-sosreport | 2.10.9-25.el8_10.alma.1 | ALSA-2025:22760 |
| AlmaLinux:8 | abrt-tui | 2.10.9-25.el8_10.alma.1 | ALSA-2025:22760 |
| AlmaLinux:8 | python3-abrt | 2.10.9-25.el8_10.alma.1 | ALSA-2025:22760 |
| AlmaLinux:8 | python3-abrt-addon | 2.10.9-25.el8_10.alma.1 | ALSA-2025:22760 |
| AlmaLinux:8 | python3-abrt-container-addon | 2.10.9-25.el8_10.alma.1 | ALSA-2025:22760 |
| AlmaLinux:8 | python3-abrt-doc | 2.10.9-25.el8_10.alma.1 | ALSA-2025:22760 |
| Rocky Linux:8 | abrt | 0:2.10.9-25.el8_10.rocky.0.1 | RLSA-2025:22760 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| abrt | 0 – before 2.17.7 | |
| Red Hat | Red Hat Enterprise Linux 6 | see references |
| Red Hat | Red Hat Enterprise Linux 7 | see references |
| Red Hat | Red Hat Enterprise Linux 8 | see references |
Weakness: CWE-78 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
References
- https://access.redhat.com/security/cve/CVE-2025-12744 vdb-entry, x_refsource_REDHAT
- RHBZ#2412467 issue-tracking, x_refsource_REDHAT