Is CVE-2025-23395 actively exploited?

No active exploitation of CVE-2025-23395 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2025-23395 be exploited remotely?

No. CVE-2025-23395 requires local access to exploit.

What is the CVSS score of CVE-2025-23395?

CVE-2025-23395 has a CVSS score of 7.8 (HIGH).

HOME VULNERABILITIESCVE-2025-23395

HIGH

CVE-2025-23395

CWE-271Published: May 26, 2025· Updated: Jun 17, 2026

7.8

CVSS v3.1

Official Description

Screen 5.0.0 when it runs with setuid-root privileges does not drop privileges while operating on a user supplied path. This allows unprivileged users to create files in arbitrary locations with `root` ownership, the invoking user's (real) group ownership and file mode 0644. All data written to the Screen PTY will be logged into this file, allowing to escalate to root privileges

NVD Source

Technical Analysis

CVE-2025-23395 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 7.8.