AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2025-2903

UNKNOWN · CVSS N/A EPSS 0.19%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2025-04-17 · Last synced 2026-08-04

CyberRota Analysis

This vulnerability has an unknown severity rating. See the original NVD description below for full technical details.

CVE
CVE-2025-2903
Severity
UNKNOWN
CVSS
N/A
EPSS
0.19%

Original NVD Description

An attacker with knowledge of creating user accounts during VM deployment on Google Cloud Platform (GCP) using the OS Login feature, can login via SSH gaining command-line control of the operating system. This allows an attacker to gain access to sensitive data stored on the VM, install malicious software, and disrupt or disable the functionality of the VM.