Log in Start free

Vulnerability · Published Dec 19, 2025 · Assigned by redhat

CVE-2025-14946Libnbd: libnbd: arbitrary code execution via ssh argument injection through a malicious uri

Medium 4.8

In plain English

A medium-severity argument injection in libnbd from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 4% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)4.8Medium
Exploit odds (30 days)0.1%top 96.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A flaw was found in libnbd. A malicious actor could exploit this by convincing libnbd to open a specially crafted Uniform Resource Identifier (URI). This vulnerability arises because non-standard hostnames starting with '-o' are incorrectly interpreted as arguments to the Secure Shell (SSH) process, rather than as hostnames. This could lead to arbitrary code execution with the privileges of the user running libnbd.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:13libnbdno fix listedDEBIAN-CVE-2025-14946
Debian:14libnbd1.22.5-1DEBIAN-CVE-2025-14946
Ubuntu:22.04:LTSlibnbdno fix listedUBUNTU-CVE-2025-14946
Ubuntu:24.04:LTSlibnbdno fix listedUBUNTU-CVE-2025-14946
Ubuntu:25.10libnbdno fix listedUBUNTU-CVE-2025-14946
Ubuntu:26.04:LTSlibnbdno fix listedUBUNTU-CVE-2025-14946

Affected products (as reported)

VendorProductVersions
Red Hat libnbd 1.22.0 – before 1.22.51.23.0 – before 1.23.9
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat OpenShift Virtualization 4 see references
Red Hat Red Hat OpenShift Virtualization 4 see references
Red Hat Red Hat OpenShift Virtualization 4 see references
Red Hat Red Hat OpenShift Virtualization 4 see references
Red Hat Red Hat OpenShift Virtualization 4 see references
Red Hat Red Hat OpenShift Virtualization 4 see references
Red Hat Red Hat OpenShift Virtualization 4 see references
Red Hat Red Hat OpenShift Virtualization 4 see references
Red Hat Red Hat OpenShift Virtualization 4 see references
Red Hat Red Hat OpenShift Virtualization 4 see references
Red Hat Red Hat OpenShift Virtualization 4 see references
Red Hat Red Hat OpenShift Virtualization 4 see references
Red Hat Red Hat OpenShift Virtualization 4 see references
Red Hat Red Hat OpenShift Virtualization 4 see references

Weakness: CWE-88 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

References