6.1Medium

CVE-2025-32802Insecure handling of file paths allows multiple local attacks

ISC Kea Published: 2025-05-28 20:08 (1 year ago)

Description

Kea configuration and API directives can be used to overwrite arbitrary files, subject to permissions granted to Kea. Many common configurations run Kea as root, leave the API entry points unsecured by default, and/or place the control sockets in insecure paths. This issue affects Kea versions 2.4.0 through 2.4.1, 2.6.0 through 2.6.2, and 2.7.0 through 2.7.8.

Weakness (CWE): CWE-73 CWE-379

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

Vendor	Product	Versions
ISC	Kea	2.4.0 – ≤ 2.4.1, 2.6.0 – ≤ 2.6.2, 2.7.0 – ≤ 2.7.8

References and patches

CVE-2025-32802 vendor-advisory

CVSS score

6.1Medium

Source: isc · CVSS 3.1

Attack vector: Local
Attack complexity: Low
Privileges required: Low
User interaction: None
Scope: Unchanged
Confidentiality: None
Integrity: Low
Availability: High

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

All scores (2)

cna	CVSS 3.1	6.1Medium
security-officer@isc.org	CVSS 3.1	6.1Medium

EPSS (chance of exploitation in 30 days)

0.22%

higher than 13% of all CVEs

CISA assessment (SSVC)

Exploitation: none
Automatable: no
Technical impact: partial

Timeline

ID reserved2025-04-10
Published2025-05-28 20:08
Reached IP-DB2026-10-24 23:59
Last updated2026-06-17 12:12

Assigned by (CNA): isc
NVD status: Deferred

View at source: CVE.org · NVD

Get told when these products get a new vulnerability

Turn on email alerts

Free · with an account · switch off any time