CVE-2025-48413 is a vulnerability where the /etc/passwd and /etc/shadow files contain hard-coded password hashes for the root user. These credentials are included in update files and cannot be changed or deleted by the end user. An attacker with access can use these credentials to authenticate via SSH or physical access methods such as UART shell.