Critical severity9.3NVD Advisory· Published Jun 28, 2025· Updated Apr 15, 2026

CVE-2025-53391

Description

The Debian zuluPolkit/CMakeLists.txt file for zuluCrypt through the zulucrypt_6.2.0-1 package has insecure PolicyKit allow_any/allow_inactive/allow_active settings that allow a local user to escalate their privileges to root.

Affected products

Debian/zulucryptllm-create
Range: <=6.2.0-1

Patches

Vulnerability mechanics

References

bugs.debian.org/1108288nvd
bugs.debian.org/cgi-bin/bugreport.cginvd
deb.debian.org/debian/pool/main/z/zulucrypt/zulucrypt_6.2.0-1.dscnvd
salsa.debian.org/debian/zulucrypt/-/blob/9d661c9f384c4d889d3387944e14ac70cfb9684b/debian/patches/fix_zulupolkit_policy.patchnvd

News mentions

No linked articles in our index yet.

cvss	0.605
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000