CVE-2025-53880

susemanager-tftpsync-recv allows arbitrary file creation and deletion due to path traversal

State: Published
Severity: 8.7 High
Published: Oct 30, 2025
Updated: Feb 26, 2026
Reserved: Jul 11, 2025

Description

A Path Traversal vulnerability in the tftpsync/add and tftpsync/delete scripts allows a remote attacker on an adjacent network to write or delete files on the filesystem with the privileges of the unprivileged wwwrun user. Although the endpoint is unauthenticated, access is restricted to a list of allowed IP addresses.

Scores

CVSS	Score	Vector	Source
4.0	8.7 High	CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N	suse

Weaknesses

CWE-35 Path Traversal

Affected Products

Product	Versions
Container suse/manager/4.3/proxy-httpd:latestSUSE	? to before 4.3.11-150400.3.15.3Affected
Container suse/manager/5.0/x86_64/proxy-httpd:latestSUSE	? to before 5.0.3-150600.3.6.4Affected
Container suse/multi-linux-manager/5.1/x86_64/proxy-httpd:latestSUSE	? to before 5.1.3-150700.3.3.3Affected
SUSE Manager Proxy LTS 4.3SUSE	? to before 4.3.11-150400.3.15.3Affected

References

https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-53880

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.