6.5

CVE-2025-52555: CephFS Permission Escalation Vulnerability in Ceph Fuse mounted FS

Deferred
AliasesMGASA-2025-0222UBUNTU-CVE-2025-52555DEBIAN-CVE-2025-52555
Published 26-06-2025Last modified 03-11-2025

Vulnerability summary

CVE-2025-52555 is a medium (CVSS 6.5) Improper Privilege Management vulnerability in ceph. EPSS estimates a 0.21% chance of exploitation in the next 30 days, higher than 11.1% of scored vulnerabilities.

Priority
Routine

Not severe (CVSS 6.5, adjacent network); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?
CVSS score
6.5/10
010
Medium · v3.1 (CVE.org)
EPSS score
0.21%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 3
DLA-4310-1RHSA-2026:1536RHSA-2026:2769

Timeline

  1. 26-06-2025
    PublishedVulnerability first disclosed.
  2. 03-11-2025
    Last modifiedVulnerability information updated.

Description

Ceph is a distributed object, block, and file storage platform. In versions 17.2.7, 18.2.1 through 18.2.4, and 19.0.0 through 19.2.2, an unprivileged user can escalate to root privileges in a ceph-fuse mounted CephFS by chmod 777 a directory owned by root to gain access. The result of this is that a user could read, write and execute to any directory owned by root as long as they chmod 777 it. This impacts confidentiality, integrity, and availability. It is patched in versions 17.2.8, 18.2.5, and 19.2.3.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.21%

Chance of exploitation in the next 30 days

Percentile

11%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.21% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Version check

Known conditions: adjacent network, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Ceph1 product
  • ceph= 17.2.7 | ≥ 18.2.1, < 18.2.5 | ≥ 19.0.0, < 19.2.3
Debian1 product
  • ceph< 16.2.15+ds-0+deb12u2 | < 18.2.6-1
Mageia1 product
  • ceph< 18.2.7-2.mga9
Ubuntu1 product
  • cephAll versions (No fix recorded)

4 vendors · 4 products

References

11 links
Show all 11 references