CVE-2025-58309

High · 7.1

CVSS

7.1

EPSS

0.1%

Published

Nov 28, 2025

CISA due date

—

The record

Permission control vulnerability in the startup recovery module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.

Affected packages

Ecosystem	Package	Introduced	Fixed