High severity8.5NVD Advisory· Published Jun 16, 2025· Updated Jun 17, 2026

CVE-2025-5689

Description

A flaw was found in the temporary user record that authd uses in the pre-auth NSS. As a result, a user login for the first time will be considered to be part of the root group in the context of that SSH session.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
github.com/ubuntu/authdGo	< 0.5.4	0.5.4

Affected products

Canonical/Authd2 versions
cpe:2.3:a:canonical:authd:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:canonical:authd:*:*:*:*:*:*:*:*range: <0.5.4
- (no CPE)range: 0.0.0
ghsa-coords2 versions
pkg:golang/github.com/ubuntu/authd pkg:rpm/opensuse/govulncheck-vulndb&distro=openSUSE%20Tumbleweed
< 0.5.4+ 1 more
- (no CPE)range: < 0.5.4
- (no CPE)range: < 0.0.20250730T213748-1.1

Patches

Vulnerability mechanics

References

github.com/ubuntu/authd/security/advisories/GHSA-g8qw-mgjx-rwjrnvdPatchVendor AdvisoryWEB
github.com/advisories/GHSA-g8qw-mgjx-rwjrghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2025-5689ghsaADVISORY
github.com/ubuntu/authd/commit/619ce8e55953b970f1765ddaad565081538151abghsaWEB

News mentions

No linked articles in our index yet.

cvss	0.552
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000