CVE-2025-0781

—

CVSS 3.1

9.9 critical

EPSS

<1%p29

Published

Jan 28, 2025 (Jan 28, 2025)

Modified

Jun 17, 2026

Description

An attacker can bypass the sandboxing of Nasal scripts and arbitrarily write to any file path that the user has permission to modify at the operating-system level.

Vendors: flightgear debian
Products: simgear, debian linux
Weakness: CWE-863
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.