Skip to content
OpenAdvisories
High DSA-6092-1 2 CVEs

smb4k - security update

Published Jan 1, 2026 · Updated Jan 1, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 13 smb4k 4.0.0-1+deb13u1

Vulnerabilities 2

  • High 7.3
    CVE-2025-66003

    Local users can perform a local root exploit via smb4k mounthelper

    An External Control of File Name or Path vulnerability in smb4k allowsl ocal users to perform a local root exploit via smb4k mounthelper if they can access and control the contents of a Samba shareThis issue affects smb4k: from ? before 4.0.5.

    https://github.com/KDE/ smb4k smb4k smb4k Debian Ubuntu
  • Medium 6.9
    CVE-2025-66002

    Local users can perform arbitrary unmounts via smb4k mount helper due to lack of input validation

    An Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability allows local users ton perform arbitrary unmounts via smb4k mount helper

    https://github.com/KDE/ smb4k smb4k smb4k Debian Ubuntu