CVE-2025-55125

Critical · 9.8

CVSS

9.8

EPSS

0.9%

Published

Jan 8, 2026

CISA due date

—

The record

This vulnerability allows a Backup or Tape Operator to perform remote code execution (RCE) as root by creating a malicious backup configuration file.

Ecosystem	Package	Introduced	Fixed