Vulnerabilities

TI-2025-40540 CVE-2025-66003 · GHSA-c32g-xjp2-p4pw

Local users can perform a local root exploit via smb4k mounthelper

LOW 33

An External Control of File Name or Path vulnerability in smb4k allowsl ocal users to perform a local root exploit via smb4k mounthelper if they can access and control the contents of a Samba shareThis issue affects smb4…

CVSS 4.0HIGH 7.3 Local Low privileges No interaction EPSS 0.00121 Published 2026-01-08 Fixed in 4.0.5 CWE-73

TI-2025-40539 CVE-2025-66002 · GHSA-g8f7-f2vp-fv6x

Local users can perform arbitrary unmounts via smb4k mount helper due to lack of input validation

LOW 30

An Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability allows local users ton perform arbitrary unmounts via smb4k mount helper

CVSS 4.0MEDIUM 6.9 Local Low privileges No interaction EPSS 0.00158 Published 2026-01-08 Fixed in 4.0.5 CWE-88

Vulnerabilities

Filters

Local users can perform a local root exploit via smb4k mounthelper

Local users can perform arbitrary unmounts via smb4k mount helper due to lack of input validation