← Database

CVE-2022-25643

CRITICAL CVSS: 9.8 Published: 2022-02-24 Modified: 2026-06-17

Description

seatd-launch in seatd 0.6.x before 0.6.4 allows removing files with escalated privileges when installed setuid root. The attack vector is a user-supplied socket pathname.

Affected Platforms

Seatd Project Seatd

Weakness Type

CWE-668

References