CVE-2025-0781: Debian Linux

Critical severity, CVSS 9.9. EPSS: 0.4% chance of exploitation in the next 30 days.

An attacker can bypass the sandboxing of Nasal scripts and arbitrarily write to any file path that the user has permission to modify at the operating-system level.

Affected products

• Debian Debian Linux: version 11.0 only
• Flightgear Simgear: up to and including 2020.3.19

Published 2025-01-28. Last modified 2026-06-17.