CVE-2025-41693

Medium · 4.3

CVSS

4.3

EPSS

0.5%

Published

Dec 9, 2025

CISA due date

—

The record

A low privileged remote attacker can use the ssh feature to execute commands directly after login. The process stays open and uses resources which leads to a reduced performance of the management functions. Switching functionality is not affected.

Affected packages

Ecosystem	Package	Introduced	Fixed