CVE-2025-27591

A privilege escalation vulnerability existed in the Below service prior to v0.9.0 due to the creation of a world-writable directory at /var/log/below. This could have allowed local unprivileged users to escalate to root privileges through symlink attacks that manipulate files such as /etc/shadow.

Affected products

Below

Facebook Below

< 0.9.0

Fix

Available

CVSS 3.1

6.8 MEDIUM

EPSS

0.4% (29th percentile)

Weakness

CWE-732

NVD status

Analyzed

Published

2025-03-11