CVE-2025-52936: CWE-59 Improper Link Resolution Before File Access ('Link Following') in yrutschle sslh
Improper Link Resolution Before File Access ('Link Following') vulnerability in yrutschle sslh.This issue affects sslh: before 2.2.2.
AI Analysis
Technical Summary
The vulnerability CVE-2025-52936 affects yrutschle sslh versions before 2.2.2 and is categorized as CWE-59, which involves improper link resolution before file access ('Link Following'). This means that the software may incorrectly handle symbolic links or similar filesystem references, potentially leading to unauthorized file access or manipulation. The CVSS 4.0 vector indicates that an attacker requires local access with low privileges and no user interaction, but the impact on confidentiality, integrity, and availability is high. No known exploits are reported in the wild, and no patch or remediation details are currently available.
Potential Impact
An attacker with local access and low privileges could exploit this vulnerability to gain unauthorized access or modify files by exploiting improper handling of symbolic links before file access. The impact on confidentiality, integrity, and availability is rated high, making this a critical security risk if exploited.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor the vendor's communications for updates. Until a fix is available, restrict local access to trusted users only and consider applying any available workarounds recommended by the vendor.
CVE-2025-52936: CWE-59 Improper Link Resolution Before File Access ('Link Following') in yrutschle sslh
Description
Improper Link Resolution Before File Access ('Link Following') vulnerability in yrutschle sslh.This issue affects sslh: before 2.2.2.
CVSS v4.0
Score 9.3critical
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability CVE-2025-52936 affects yrutschle sslh versions before 2.2.2 and is categorized as CWE-59, which involves improper link resolution before file access ('Link Following'). This means that the software may incorrectly handle symbolic links or similar filesystem references, potentially leading to unauthorized file access or manipulation. The CVSS 4.0 vector indicates that an attacker requires local access with low privileges and no user interaction, but the impact on confidentiality, integrity, and availability is high. No known exploits are reported in the wild, and no patch or remediation details are currently available.
Potential Impact
An attacker with local access and low privileges could exploit this vulnerability to gain unauthorized access or modify files by exploiting improper handling of symbolic links before file access. The impact on confidentiality, integrity, and availability is rated high, making this a critical security risk if exploited.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor the vendor's communications for updates. Until a fix is available, restrict local access to trusted users only and consider applying any available workarounds recommended by the vendor.
Technical Details
- Data Version
- 5.1
- Assigner Short Name
- GovTech CSG
- Date Reserved
- 2025-06-23T09:24:36.336Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 68592327179a4edd60b65f45
Added to database: 06/23/2025, 09:49:27 UTC
Last enriched: 08/01/2026, 19:28:55 UTC
Last updated: 09/10/2026, 19:36:51 UTC
Views: 196
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.