CVE-2025-40908: YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified
Analyzed
AliasesMGASA-2025-0275SUSE-RU-2025:03081-1SUSE-SU-2025:01885-1SUSE-SU-2025:01885-2SUSE-SU-2025:01886-1RHSA-2025:9329RHSA-2025:9330RHSA-2025:9338UBUNTU-CVE-2025-40908USN-7632-1DEBIAN-CVE-2025-40908openSUSE-SU-2025:15261-1
Published 01-06-2025Last modified 02-06-2025
Vulnerability summary
CVE-2025-40908 is a critical (CVSS 9.1) vulnerability in ingydotnet yaml-libyaml. EPSS estimates a 0.45% chance of exploitation in the next 30 days, higher than 38.3% of scored vulnerabilities. 1 public exploit is recorded.
CVSS score
9.1/10
010
Critical · v3.1 (CVE.org)EPSS score
0.45%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits1github
Timeline
- 01-06-2025PublishedVulnerability first disclosed.
- 02-06-2025Last modifiedVulnerability information updated.
Description
YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified
CVSS metrics
5 scores · 5 sources · 1 versionCritical 9.1Preferred score · CVE.org (CNA)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:NSources5 sources · 7.7–9.1
- OSV · Red hatEcosystem advisory · calculated7.7HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:NDiffers
- OSV · UbuntuEcosystem advisory · calculated9.1CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- OSV · DebianEcosystem advisory · calculated9.1CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- NVDNIST9.1CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS trend
Probability
0.45%
Chance of exploitation in the next 30 days
Percentile
38%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.46% on 22-09-2026
22-09-202622-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
1 foundYaml Libyaml Pm
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Suse4 products
- perl-YAML-LibYAML&distro=SUSE Linux Enterprise Module for Development Tools 15 SP6< 0.890.0-150000.3.11.1 | < 0.904.0-150000.3.16.1
- perl-YAML-LibYAML&distro=SUSE Linux Enterprise Module for Development Tools 15 SP7< 0.904.0-150000.3.16.1
- perl-YAML-LibYAML&distro=SUSE Linux Enterprise Server 12 SP5-LTSS< 0.38-11.3.1
- perl-YAML-LibYAML&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5< 0.38-11.3.1
Redhat3 products
- perl-YAML-LibYAML< 1:0.82-6.el9_4.1 | < 1:0.70-2.el8_10 | < 1:0.82-6.1.el9_6
- perl-YAML-LibYAML-debuginfo< 1:0.82-6.el9_4.1 | < 1:0.70-2.el8_10 | < 1:0.82-6.1.el9_6
- perl-YAML-LibYAML-debugsource< 1:0.82-6.el9_4.1 | < 1:0.70-2.el8_10 | < 1:0.82-6.1.el9_6
Opensuse2 products
- perl-YAML-LibYAML&distro=openSUSE Leap 15.6< 0.890.0-150000.3.11.1 | < 0.904.0-150000.3.16.1
- perl-YAML-LibYAML&distro=openSUSE Tumbleweed< 0.904.0-2.1
Debian1 product
- libyaml-libyaml-perl< 0.86+ds-1+deb12u1 | < 0.903.0+ds-1
Ingydotnet1 product
- yaml-libyaml< 0.903.0
Mageia1 product
- perl-YAML-LibYAML< 0.860.0-1.1.mga9
Tinita1 product
- yaml::libyaml< 0.903.0
Ubuntu1 product
- libyaml-libyaml-perlAll versions (No fix recorded) | < 0.83+ds-1ubuntu0.22.04.1 | < 0.89+ds-1ubuntu0.24.04.1
8 vendors · 14 products
