What’s Vulnerable › Vulnerabilities

CVE-2025-46803: Screen creates by default world-writable PTYs

• Severity: medium (CVSS 5.0 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-05-26 · updated 2026-06-17
• Weakness: CWE-276

Description

The default mode of pseudo terminals (PTYs) allocated by Screen was changed from 0620 to 0622, thereby allowing anyone to write to any Screen PTYs in the system.

References

• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-46803
• https://www.openwall.com/lists/oss-security/2025/05/12/1
• http://www.openwall.com/lists/oss-security/2025/05/13/6
• https://www.openwall.com/lists/oss-security/2025/05/12/1

Get alerted when CVE-2025-46803 or the next vulnerability affects your stack