CVE-2025-68462: Debian Freedombox

Low severity, CVSS 3.2. EPSS: 0.1% chance of exploitation in the next 30 days.

Freedombox before 25.17.1 does not set proper permissions for the backups-data directory, allowing the reading of dump files of databases.

Affected products

• Debian Freedombox: before 25.17.1 (fixed in 25.17.1)

Published 2025-12-18. Last modified 2026-06-17.