CVE-2025-27591

Published: Mar 11, 2025Modified: Jun 17, 2026

6.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

Exploitability: 2.5 / Impact: 4.2

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

A privilege escalation vulnerability existed in the Below service prior to v0.9.0 due to the creation of a world-writable directory at /var/log/below. This could have allowed local unprivileged users to escalate to root privileges through symlink attacks that manipulate files such as /etc/shadow.

Affected (1)

Products: Facebook: Below

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Facebook Below	Before 0.9.0

Related CWEs

Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

References (3)

https://github.com/facebookincubator/below/commit/da9382e6e3e332fd2c3195e22f34977f83f0f1f3

Source: cve-assign@fb.com

Patch

https://www.facebook.com/security/advisories/cve-2025-27591

Source: cve-assign@fb.com

PatchVendor Advisory

http://www.openwall.com/lists/oss-security/2025/03/12/1

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitMailing List

Timeline

No history available yet.