CVE-2025-3155 is a vulnerability in Yelp, the GNOME help browser, which allows arbitrary script execution via crafted help documents. This can lead to exfiltration of user files by malicious actors who can supply malicious help content. The vulnerability involves an open redirect (CWE-601) that can redirect users to untrusted sites potentially hosting malware or phishing pages. The flaw requires user interaction but no privileges, and the attack scope is changed. Red Hat has rated this vulnerability as Important and issued security updates for affected versions, particularly in Red Hat Enterprise Linux 9.0 variants. The CVSS score is 7.4, reflecting high confidentiality impact but no integrity or availability impact. No mitigations other than patching are currently available.

Successful exploitation allows attackers to execute arbitrary scripts embedded in help documents, potentially exfiltrating sensitive user files to external locations. The vulnerability can also facilitate phishing attacks through open redirects to malicious sites. The attack requires user interaction but no privileges, and the confidentiality of user data is at high risk. There is no impact on integrity or availability. No known active exploits have been reported.

A security update fixing this vulnerability is available from Red Hat for affected products, including Red Hat Enterprise Linux 9.0 and its variants. Users and administrators should apply the official patches as described in the Red Hat advisory (RHSA-2025:4450). Currently, no alternative mitigations are available. Applying the vendor-provided update is the recommended and effective remediation.