CVE-2025-12744: Red Hat Enterprise Linux 6

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

A flaw was found in the ABRT daemon’s handling of user-supplied mount information.ABRT copies up to 12 characters from an untrusted input and places them directly into a shell command (docker inspect %s) without proper validation. An unprivileged local user can craft a payload that injects shell metacharacters, causing the root-running ABRT process to execute attacker-controlled commands and ultimately gain full root privileges.

Affected products

• Red Hat Red Hat Enterprise Linux 6
• Red Hat Red Hat Enterprise Linux 7
• Red Hat Red Hat Enterprise Linux 8

Published 2025-12-03. Last modified 2026-06-17.