CVE-2025-46810

HIGH

openSUSE Tumbleweed traefik2 <2.11.29 - Privilege Escalation

Title source: llm
STIX 2.1

Description

A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of openSUSE Tumbleweed traefik2 allows the traefik user to escalate to root. This issue affects Tumbleweed: from ? before 2.11.29.

References (1)

Core 1
Core References

Scores

CVSS v4 8.5
EPSS 0.0015
EPSS Percentile 4.5%
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-61
Status published
Products (1)
openSUSE/Tumbleweed ? - 2.11.29
Published Sep 02, 2025
Tracked Since Feb 18, 2026