The vulnerability in Samba's smbd daemon involves failure to update group membership information when re-authenticating an expired SMB session. As a result, file shares may be exposed to external parties who should no longer have access until the client disconnects and establishes a new session. This issue affects Samba version 4.21.0 as reported. The CVSS 3.1 base score is 4.9, indicating medium severity with network attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, high confidentiality impact, no integrity or availability impact. No known exploits are reported in the wild. The vendor advisory from Red Hat is available but does not explicitly state patch or remediation status in the provided content.

Unauthorized external parties may gain continued access to file shares due to stale group membership information during SMB session re-authentication. This exposure persists until the client disconnects and reconnects, potentially leading to confidentiality breaches. There is no impact on integrity or availability.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2025-0620 for current remediation guidance. Until a fix is applied, administrators should consider forcing SMB clients to disconnect and reconnect sessions to refresh group membership or apply any recommended workarounds from the vendor.